General

  • Target

    saham.apk

  • Size

    2.6MB

  • MD5

    a7f9d384266259c935f2bf4d4e563778

  • SHA1

    48b3a508774052c62ec950f13c2ffc9cedaf26fc

  • SHA256

    ea080bd1e3b0e32b98a5774adcb61f7751959bc5b6d3281a22943c74d15fd1ad

  • SHA512

    32f78096033180351b7d3a50fb87a67879c3cb6ea3d944948bea589f5ca36462347217adb8243d78d79e09110cc684899dfddd375b71e1e6930ae783fb89d089

  • SSDEEP

    49152:eB/6JtBjp0t60A2GYItRZoZzp/lsTOOPMTstbwd7dWhAcxGsgdN8w269Qn22GY0g:el61d0bY1mzDkLMwwRdWhAfZt9S2tydJ

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • saham.apk
    .apk android

    ahora.arsam.com

    .main


  • layout.bal
  • port.txt

Android Permissions

saham.apk

Permissions

ahora.arsam.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

ahora.arsam.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE