General

  • Target

    app.apk

  • Size

    2.7MB

  • MD5

    692fcafd124e57b9c1b9035c0a108aa1

  • SHA1

    10dadd7b5e8ddfd8c6ffe0f31129a27d01a54783

  • SHA256

    e1346ae88753a44d85451566789a5b8c3b3423e2868d41a89378415aad04d688

  • SHA512

    d7aeda62e5509c18d3e82ce7fd50201061ea36bc641ad126d7a102753dbad6beb90d73882495b188e29c6a285a37bfb87324f48423d7c4985bd18af65081bc59

  • SSDEEP

    49152:+/6EtL4/LrDlfe18926e+52dr5z039Tmfu0gExL33ZOENpPd1PaVEFM:0624jZf325z039TmfufExD0ENZdsuC

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • app.apk
    .apk android

    vip.app.com

    .main


  • layout.bal
  • main.bal

Android Permissions

app.apk

Permissions

vip.app.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

vip.app.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS