General

  • Target

    saham.apk

  • Size

    4.1MB

  • MD5

    c85791da18c80e0a1bc6059c43e294ae

  • SHA1

    43b853dbcd4b0f9a1edd98adbe3a4e6eccaaf32a

  • SHA256

    6dd0b56f568afd054fb3d3a2d41ddfa51f65530868cb48cd038c0e66f07d0566

  • SHA512

    ab418a68eb78e02b21aed806fea3b468108d0691004b31d280877da331efa77dfc1d28460267b0d64c22da100645f4dad086981191d2539c30bdcc82cf17f8de

  • SSDEEP

    98304:8p2h/fYBtcOFLjRaXKOzcbHi+sgLCrOgHn0:j98VF4XKOzGCPU

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • saham.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.notnull.release

    com.notnull.release.MainActivity


  • baseline.prof
  • baseline.profm

Android Permissions

saham.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.SEND_SMS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.notnull.release.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION