General

  • Target

    app.apk

  • Size

    5.2MB

  • MD5

    2d31f2879d304f58be482b73a6322530

  • SHA1

    396b24f6dcfa68b4f6cff1d485723a1974d1505c

  • SHA256

    e28b6d0f3f06519f9e80b59351ff3d2fd11365aaa7e15605a2759e4dcfa25363

  • SHA512

    fe0c50f70949f0f7386c71bdf1231e4acc1ca8eca5ac7382969dcb6ebe6062f58027fb42928920de34f5c3b95a16af7ef8ed591e58ddc91cdb5d99e6ad302f7b

  • SSDEEP

    98304:7jOcWf3RXk6Hb08vnipL536k7owu9LlCYOS2mwgIhIu3DGpTGxIKdIA/Fl9qQ1S:2c2XF08KDKwgcYO4wguPapTG2Y79qwS

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • app.apk
    .apk android

    com.lydia.route

    .main


  • getewayport.txt
  • link.txt
  • number.txt

Android Permissions

app.apk

Permissions

com.lydia.route.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.lydia.route.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS