General

  • Target

    saham.apk

  • Size

    2.6MB

  • MD5

    2fd08a8db15d03256e235bee6b44aba1

  • SHA1

    f6baabd2b0ca289ffa7534627e65a056463e2672

  • SHA256

    c95a8bd1c0d201126f3a42718af5faa70171068f32346ea0dc8d91595bed26d2

  • SHA512

    78b79ecff9beb70178e8d56d2329021658aa7a3e963e65469fb2d1f846782956be0d5781312d7f2ee111c00b1a5508a21cc8cb05b272f184c557ada2df49941b

  • SSDEEP

    49152:gEwD398FtXaPO6Q0+gAPMewTgokyKNlsZQ0FgF5aXW+37RVzm:gH39atXK1Qh1N2I5aXR9Va

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 7 IoCs

Files

  • saham.apk
    .apk android

    com.justapp.devs

    .main


  • layout.bal

Android Permissions

saham.apk

Permissions

com.justapp.devs.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.justapp.devs.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CALL_LOG

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_BACKGROUND_LOCATION