General

  • Target

    app.apk

  • Size

    1.7MB

  • MD5

    e273346a71ad974e1744c2b4c56acc9f

  • SHA1

    57d43a0110abe9e05461f7557536c97b0da07333

  • SHA256

    710fd2e38d4a483f40862ade03ca0df5c478f775dc04723e52f953d3f3eef7d9

  • SHA512

    0c4cd6d83537f25d4a7287d6adb493d998e5035b70125cb039b9b71901a45d103c9c6d4b0d3b7a5712e9a045fcfce401255f8b86f535b9af4873a9803266f891

  • SSDEEP

    49152:SswbSZkk6EXLhzJU2dh6Nw7uByPT/OAATc0qnC+1xLdaazC:s2ZkkBXjUC6S7uBaT/rp0qnC+1xRzC

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • app.apk
    .apk android

    com.lyufo.play

    .main


Android Permissions

app.apk

Permissions

com.lyufo.play.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_SMS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.lyufo.play.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY