General

  • Target

    app.apk

  • Size

    4.1MB

  • MD5

    bf24fe7680868cf7443beea880b04e9e

  • SHA1

    7d4543dd6f53e3460fca4f4f8b158ee9d7ea6239

  • SHA256

    c0541c3f6bbba5bf7dc24ba55b9bcad559ee28a93f8ac3ccfa2b320049d29bf3

  • SHA512

    bb62760e1b6c7c94b5333456bbc78caf346c99f21970b8ec6e8f4780f22cac800c516de17c355f416abff3b803775cc20ecd59d4bd69d7ae2b50c05ccbed20b6

  • SSDEEP

    98304:VHFozAZD50GnvGmrWZOzbGPeMy0MOzTvHi8swpUgLCrOgHu:VGzE50yOfgz9Z0MOzjCRm2O

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • app.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.notnull.release

    com.notnull.release.MainActivity


  • baseline.prof
  • baseline.profm

Android Permissions

app.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.SEND_SMS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.notnull.release.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION