General

  • Target

    9b55f8708c349c1360c4fe60b22993a62dc16654b569f74c467ade3b26567032_JC.apk

  • Size

    2.1MB

  • MD5

    87e86f2ce5624ee7e4f5d11a9b3b9cac

  • SHA1

    e808d0ea324e70340b1ed234587401b35e2609a2

  • SHA256

    9b55f8708c349c1360c4fe60b22993a62dc16654b569f74c467ade3b26567032

  • SHA512

    5be8ab11c5333ea19671e401c9e0879ef4d3a306a4c7124405e32f032da05b948431b0ab5774cdb8160d17faf4a10153249feb44252a99c67d82371a04ff7a32

  • SSDEEP

    49152:AEahFJ/IunV2Hk3ZRBfIaqU/RK9XFhRSIt1bovH27Gxaz6OEb5CbsKWP9FF5Qd:AZhj/IunVuk3ZfqUc9XFjJPohxaW1lCz

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 9b55f8708c349c1360c4fe60b22993a62dc16654b569f74c467ade3b26567032_JC.apk
    .apk android

    com.MrXnxVip.global

    .main


  • layout.bal
  • port.txt

Android Permissions

9b55f8708c349c1360c4fe60b22993a62dc16654b569f74c467ade3b26567032_JC.apk

Permissions

com.MrXnxVip.global.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.MrXnxVip.global.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE