General

  • Target

    saham.apk

  • Size

    3.4MB

  • MD5

    64a64fe770d35f8a8c90329a45b2cb1b

  • SHA1

    0de736a49a0123a2d15255cfa0a5d2bb149c34bb

  • SHA256

    84585e6b6bb6e21753d0ee172a9e18fb8935d024f171ebb506c8251963fa2c27

  • SHA512

    a9808c7b7f96bab5a34f87e3c1708d99c23ca4b353b7b56d2910a3824e72716beb0e2bff2ef4296220be0d87f970309a1c87a581676bec2db3a55e0aefba443e

  • SSDEEP

    49152:516Hm13PJTSYWkPM8NS5FrBbxhYZFf11HxgBgLCr8YL0Tzkmknc:SHK3PgYWkPM7Fr5fgLCr8YL0Ic

Score
10/10

Malware Config

Signatures

  • Irata family
  • Requests dangerous framework permissions 6 IoCs

Files

  • saham.apk
    .apk android

    com.drnull.v3

    com.drnull.v3.MainActivity


  • baseline.prof
  • baseline.profm
  • chat_id.txt

Android Permissions

saham.apk

Permissions

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION