General

  • Target

    app.apk

  • Size

    1.8MB

  • MD5

    4987b3f2f7e4e11c77e9177ae6f93eff

  • SHA1

    c2d7f339d498fdbee162d0ca1951f938cef9267a

  • SHA256

    8ab0cc691c78560874ec8aee5bbc77a613d41b5e3146bf06a958cfaf436af92a

  • SHA512

    c5806c8a5396f482c5a154115c7c728351cfc5b81dd63fd3bd87c1cf8937a9cfce9428ca2c2bb30b39a347c84924833f2605002b90675b71305985c705e9f6f3

  • SSDEEP

    49152:ks/ikkp7XQodx6v2sOwOCJKgkPT6fGpHDX:pikkpX5ygRvdDX

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • app.apk
    .apk android

    com.lydia.route

    .main


  • getewayport.txt

Android Permissions

app.apk

Permissions

com.lydia.route.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_SMS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.lydia.route.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS