General

  • Target

    saham.apk

  • Size

    2.6MB

  • MD5

    29cbbe048cf2055d07e7203844a29647

  • SHA1

    3da99558f7682da843d274a5c656e8649565f93c

  • SHA256

    5e57ad832d0eba886df242533510228877eea42944b1934951fcb6fb2b9c2c1a

  • SHA512

    ec274a594533e7e9de5a390ad49ed317deeeb79c97364d106daf88dfb7b41dee1496842d101f6c4c06305b16444ae3ef1adeb8bed175a60e0ecdc37fabb3d217

  • SSDEEP

    49152:BE7137Qf4Phr7WY27VZWYhtNWSIWoDarMmcn1xf2HItykyXOkn5K3RChk:Be3sQPlKYoWYhtkSIW0mcnnf0IUFeYk

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • saham.apk
    .apk android

    vip.app.com

    .main


  • layout.bal

Android Permissions

saham.apk

Permissions

vip.app.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

vip.app.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.SEND_SMS