General

  • Target

    saham.apk

  • Size

    4.1MB

  • MD5

    60e2ec5f1dc345e0edd123e3d2abad4a

  • SHA1

    a23ab385d112df8c80b72490283c24cea684e058

  • SHA256

    9531060222b82dc748913bca24eb75685895830ebce136fad0aa115445426c47

  • SHA512

    b0a696fdaa9d53c1df7935a6e68f69821427ef7146414b955c28457d894120dd6a67872516f03fe7064e5f251d2e7f807debc069a8d54cee42fb2b86d81104eb

  • SSDEEP

    98304:oivCgpGk9exeuEgLCrg3TNRltvW5E5pUrFOeKoD:oiqsejnNVW5E5pUrHnD

Score
10/10

Malware Config

Signatures

  • Irata family
  • Requests dangerous framework permissions 7 IoCs

Files

  • saham.apk
    .apk android arch:x64 arch:arm64 arch:arm arch:x86

    com.drnull.v3

    com.drnull.v3.MainActivity


  • baseline.prof
  • baseline.profm
  • chat_id.txt

Android Permissions

saham.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION