General

  • Target

    1e6423a9e01aa7b73d2c64cffbc5f5e5f44360f38661da8de371c0035a167c6f_JC.apk

  • Size

    1.9MB

  • MD5

    ea27a1e586242918416fd2d7c84e5555

  • SHA1

    e70bfea2ae1a6a3d666c5109da52f75db7217a0d

  • SHA256

    1e6423a9e01aa7b73d2c64cffbc5f5e5f44360f38661da8de371c0035a167c6f

  • SHA512

    dd99bf35d5ebf9e03cfc6357ce73695e0c83d1b7de8adab5094a45647e7da530ac1b3dd2c9ac1bd4e469a69fd98226b7c32d551f8be7b4ef2f704276e05d7a5d

  • SSDEEP

    49152:Q/XS2H1rZY8/5H25KpolqrBlOK5+yv3tvf:+C01r68/MgClfK5+yFvf

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 1e6423a9e01aa7b73d2c64cffbc5f5e5f44360f38661da8de371c0035a167c6f_JC.apk
    .apk android

    kisi.com

    .main


  • lmain.bal

Android Permissions

1e6423a9e01aa7b73d2c64cffbc5f5e5f44360f38661da8de371c0035a167c6f_JC.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

kisi.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS