General

  • Target

    63033e207e707f564ad4946251eec00c.bin

  • Size

    1.6MB

  • MD5

    a62030fafbad4b47b0f729d740ad8f0a

  • SHA1

    243ec63bf74418ac8c212e4cd8a514a90c3f1bdf

  • SHA256

    c3545ae7e3489dbff9d00abde4a7694ff1d06ef5e1727bd2799525033fec0f84

  • SHA512

    c90bf242567f0a1cfc621ef08ba44fb885083b668d10284535f43190bec80e61a83d2d75ce9cd2634adfe5eae2189a405d3d705fab1775d60b10d87f4e71e8fc

  • SSDEEP

    24576:MMJ2hlVKzYa2zZ3FqFi6Rr1ri/k4nt7XCI3dEHxKBvWR9j62VENnpvKIZTU:MMJ2h/KvZFE/keBXjERKxWR9ZkSaTU

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • 63033e207e707f564ad4946251eec00c.bin
    .zip

    Password: infected

  • 4b434e2e9a688ca3ae15445be3f215a37cd42f5019a17a0d366de366dd048d04.apk
    .apk android

    Password: infected

    com.lyufo.play

    .main


  • port.txt