General

  • Target

    bda86ba9f504df73e9d57972329dc9a46fd1f1b300978ed1a7ebfcbdaa9a89a0_JC.apk

  • Size

    3.0MB

  • MD5

    dae48653369bba6efdd7e00ff8da3afc

  • SHA1

    146b8eb6f1a925960f2f2a3af8f4b7198611d9c0

  • SHA256

    bda86ba9f504df73e9d57972329dc9a46fd1f1b300978ed1a7ebfcbdaa9a89a0

  • SHA512

    0a1443cae3b7acc81d2b98297470874ca3a8d4c99ae37ba0143a10ead21263a547db3eeb7d9ca51f5ee696db4047a053de9c75138c282b3829292ccd796352cd

  • SSDEEP

    49152:8oR8lhgu9JxPTH80m9DnkqsgJY2PIwVDQI3VNXGBlR6ea2Ou4SA/jQ1YzOZs/IpH:LiJRVma2QAzVhG7R6Bzhj/jpk1p

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • bda86ba9f504df73e9d57972329dc9a46fd1f1b300978ed1a7ebfcbdaa9a89a0_JC.apk
    .apk android

    com.lydia.route

    .main


  • getewayport.txt

Android Permissions

bda86ba9f504df73e9d57972329dc9a46fd1f1b300978ed1a7ebfcbdaa9a89a0_JC.apk

Permissions

com.lydia.route.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_SMS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.lydia.route.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY