General

  • Target

    saham.apk

  • Size

    2.1MB

  • MD5

    ec5694f441ad9f34523be5a792a5d0f4

  • SHA1

    35b0e1a70675a756f6dcf519d9d08ed651b97360

  • SHA256

    77a3e4ed1a9ceef55527a8a19e433c4c99726a36f0297e3a28c52c3ac5b02f44

  • SHA512

    d89b15b19bfe81db9acb6a296d911af00b1ebd9cd1b64169f866746d8a946b701f1c8bceb0b7c4a9a01acd00350551bea1aa110bb67aa77784a1b4e07896e730

  • SSDEEP

    49152:AEmSzTXrY7ssWKBcjk3Nj6WcnU0pAjkWsP9zpWxNAb47SH:ABurE7s5K0k3N+Wb0pWtk6xYoA

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • saham.apk
    .apk android

    com.MrXnxVip.global

    .main


  • layout.bal
  • port.txt

Android Permissions

saham.apk

Permissions

com.MrXnxVip.global.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.MrXnxVip.global.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE