General

  • Target

    saham.apk

  • Size

    3.0MB

  • MD5

    0a9d55d002661a188fec0c2b43e71258

  • SHA1

    12cf0400e1580b125f27fd2a44e15f6f14c165e3

  • SHA256

    6b1747a4a06b1724d8e16591c8c404d0968d30a79a376da7cb7f59d6c971efb6

  • SHA512

    1f185655991bd9e06280a8c82db7de91cef8b569cb2827a784d1205514d8b3372c54f7a210fd4bc6ef5558315dad01def1f7a2fe2a9f484ff7fbcb7e14eda5ef

  • SSDEEP

    49152:JNtXG1g8xo6PkmlWj9bodhu2UoutxJSx0ROsGxlr33NgtXFfA56izufVCptxTrJj:Jn2g8xoSkmlWj9bopUFDE7sUrnNgXFfU

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • saham.apk
    .apk android

    com.lydia.route

    .main


  • getewayport.txt

Android Permissions

saham.apk

Permissions

com.lydia.route.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_SMS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.lydia.route.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS