General

  • Target

    KissLande.apk

  • Size

    3.5MB

  • MD5

    c70a81abb29dfb9a8b7edb5e415231c5

  • SHA1

    f72d21cdc507f49bda83a2ef2f1fe894b0059c86

  • SHA256

    47c33e87591bfe2c50b672297baef8a13f45cca435623b98c85871a8f6becf9d

  • SHA512

    88a9e42ab93ebc66678d8360850317f526912f021ec5049bb79ea655da49e513b3bdc610e602a9f0c6fe42860a27ca3a3a5b0db432da423cdc8782ab352c92ea

  • SSDEEP

    98304:1SPc6efffnRcj7jGPJqydG8BMSqVauu3kKSz4hzI:1S0XcXgcVaj3tG4hzI

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://uploads.dachhost

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • KissLande.apk
    .apk android

    ir.shz.shzkisi

    .main


  • Toxic-Port.txt
  • lmain.bal
  • url.txt

Android Permissions

KissLande.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS