General

  • Target

    saham.apk

  • Size

    1.7MB

  • MD5

    db311beff16b8949a5ae6d691fa478fe

  • SHA1

    5034453ad55c2ab23ea71193c1fc2b8e17886870

  • SHA256

    7ae7bf6fac7ce2f6cf2c5312bbb2af7978710ad6087e3b487c7472b7e4718e4c

  • SHA512

    2a2e77ddc0460d5ea33ed6df976a478fab68f4ab93ad86def37585fae68a72e508b0b3dac83fbfb506499916c67403f2af3f077c47b2b8aaf427d20922594e65

  • SSDEEP

    49152:esFkk6EXLSP5TNdUb/SX7yKO7Fwissao8bD4:NkkBXmTNdC/SryKOxfsat

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • saham.apk
    .apk android

    com.lyufo.play

    .main


  • pu.txt

Android Permissions

saham.apk

Permissions

com.lyufo.play.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.lyufo.play.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY