General

  • Target

    app.apk

  • Size

    2.6MB

  • MD5

    b8b382c8159313895f53f233716c8b9e

  • SHA1

    99a253f6f9f82f7912393f24d114d03b81b05685

  • SHA256

    b710a474a6d8795ad874f69abf7d9925ddd85b88ab6cda0568f53858fbe3175c

  • SHA512

    ef341118314b6fda1f9625e1100d990a6c692eeecb8ffe9b855370ed2c188899607f7c7501a4dc2a738f67508ef82e723806f934f7b8c3d4a56a9f161ae774d2

  • SSDEEP

    49152:HE7wvah+CAKSFDomHhcKf4PJEnPRa/TAyKTpLnqTI385EF4j/oCGs:HPvEXAVDtVtJakyKT8TU1Fe/oBs

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • app.apk
    .apk android

    vip.app.com

    .main


  • layout.bal
  • main.bal

Android Permissions

app.apk

Permissions

vip.app.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

vip.app.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SEND_SMS