General

  • Target

    app1.apk

  • Size

    2.6MB

  • MD5

    a375649dbeac700c593a1f1da9f8bbf5

  • SHA1

    122b340c88ba87ecde202f10fd3f050bb288f9a8

  • SHA256

    849a65083734014cff3ae5be80b428c8e4e8843415a9e4e540491ef2a3f1046d

  • SHA512

    f5ffcd40f238fc0a9f6ea99a191d72e9fa3af4cb42b8b95f0f9ca0c35adc65527396a92e74d979e3195c24aba39dde3ceff06f3d1bc5185f0804bc311b5e2801

  • SSDEEP

    49152:Xs/ikkp7XQoPGX4DcT9u2eLiluUZHUrXszcYePeB+4MJtDfmC:YikkpXznDcZnezUZiXszcjWQ4MJgC

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • app1.apk
    .apk android

    com.lydia.route

    .main


  • getewayport.txt
  • link.txt
  • number.txt

Android Permissions

app1.apk

Permissions

com.lydia.route.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.lydia.route.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS