General

  • Target

    app.apk

  • Size

    2.9MB

  • MD5

    b0f0182f0bf3a09f5443803e4fec83a8

  • SHA1

    2df7920118b1375542ab046c36d41b9ce91c808d

  • SHA256

    34cda39167979773b1d5a4ee0dfd17a48254577d7f2e301cfa9e3eedf3f783d8

  • SHA512

    9a9af48493c5e401e652ec9df098841b9a4cd967a8219a2359e7a8ecd48d7686fac02d1e2f0bb1544be6fae5370c4b527d093587a2253c747974ff08b9391c8a

  • SSDEEP

    49152:T/Z9A6xdSvb9JIG/iVg4Ab5idBi5wDmn6Tk8v6d5wXYFmxSg53IJTgkoYCTd0b79:7PANvbr/n4m5hSpk8SdyP3VgCTdo7RRN

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • app.apk
    .apk android

    com.minion.fcm

    .main


  • layout.bal
  • port.txt

Android Permissions

app.apk

Permissions

com.minion.fcm.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_COARSE_UPDATES

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.minion.fcm.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE