.main
android.intent.action.MAIN
General
-
Target
0d2f89781298a759e99ab22f4d31f40a52b5283b
-
Size
2.1MB
-
MD5
bdae330fdb84037c9f942e1daae0bd35
-
SHA1
0d2f89781298a759e99ab22f4d31f40a52b5283b
-
SHA256
375ea6f1414af28c9b91d6657ea18394995f0f3b35e935c895bb0dbdfe3f6a4a
-
SHA512
3ff77dc7264a261ed993deeab63004150b27d554e1d604787b53b40c0bb1841cee148b312667ad59dda3eb25515808f2b10e649126fadc5cca0ef8a36a489782
-
SSDEEP
49152:AEVrexrF01i6lxLfdq8to3iPX9b8FePz5d3okT/CP9FFy8vLmK:A4rehFIi65q862tsilhT/CPLk0Lx
Score
10/10
Malware Config
Signatures
-
Irata family
-
Irata payload 1 IoCs
resource yara_rule sample family_irata4 -
Requests dangerous framework permissions 4 IoCs
description ioc Allows an application to read SMS messages. android.permission.READ_SMS Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS
Files
-
0d2f89781298a759e99ab22f4d31f40a52b5283b.apk android
com.MrXnxVip.global
.main
Activities
Permissions
com.MrXnxVip.global.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.INTERNET
android.permission.READ_SMS
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.POST_NOTIFICATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_NETWORK_STATE
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
com.MrXnxVip.global.permission.C2D_MESSAGE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.ACCESS_WIFI_STATE
Receivers
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION
.starter$starter_BR
android.intent.action.BOOT_COMPLETED
.firebasemessaging$firebasemessaging_BR
android.intent.action.BOOT_COMPLETED
.newmessage1$newmessage1_BR
android.intent.action.BOOT_COMPLETED
android.provider.Telephony.SMS_RECEIVED
.pnservices$pnservices_BR
android.intent.action.BOOT_COMPLETED
Services
com.google.firebase.iid.FirebaseInstanceIdService
com.google.firebase.INSTANCE_ID_EVENT
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
anywheresoftware.b4a.objects.FirebaseNotificationsService
com.google.firebase.MESSAGING_EVENT
-
layout.bal
-
port.txt
Android Permissions
0d2f89781298a759e99ab22f4d31f40a52b5283b
Permissions
com.MrXnxVip.global.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.INTERNET
android.permission.READ_SMS
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.POST_NOTIFICATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_NETWORK_STATE
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
com.MrXnxVip.global.permission.C2D_MESSAGE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.ACCESS_WIFI_STATE