General

  • Target

    saham.apk

  • Size

    2.7MB

  • MD5

    47911a76ed7eea637edf80ea641c1146

  • SHA1

    d6d7783b3cb2064b002fe479bb301eb746f92d54

  • SHA256

    5317b30169763ebb611bcd68f8ebe6232d782f7e749c412e7a55405d7afee740

  • SHA512

    3ba586c0fc4e35cd98e9fa2532835c79de246066fc11c507de713ac385fec36294ca06c870c398d6275786f1b6d5cd7006375e20ea1564c0c25af31145e57fe3

  • SSDEEP

    49152:F/6Et1oTDcOH8PKDIvlWUsP/BFCCIPXnozOs3Gv9IIL4KrRAu3hjEjQhTXo/a0LQ:d60scOcPRWUsPJFCNXfs3+93Llr+uvXF

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • saham.apk
    .apk android

    vip.app.com

    .main


  • layout.bal
  • main.bal

Android Permissions

saham.apk

Permissions

vip.app.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

vip.app.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SEND_SMS