Overview

overview

10

Static

static

10

saham.apk

android-9-x86

7

saham.apk

android-10-x64

7

saham.apk

android-11-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    saham.apk

  • Size

    2.6MB

  • MD5

    fa95bfbdcd4a196c01e01799a79c0fa7

  • SHA1

    9a350f56d951284983a414e8bc3af9006ead6ef0

  • SHA256

    1129892f02171256465594ad31d3ab7ae84a6f7d708d826aabb37cc38c1459c6

  • SHA512

    5e2fbf3729cbec9ed57595f15db2256696a5e8ac50fd34cc652623d8e3ea8f3b6a3de55f10806b1c7e688094b34096749a36113538b85c551b589c22d47afa4c

  • SSDEEP

    49152:HYFOp/cBT2DN3cycC7mhVlvZXukxOQgpWk9L53yJdT9cOuKo2qwUVmyds:4Qp/cBT2B3pcC7mRmdzL5CJdTWr8T

Score
10/10
irata

Malware Config

Signatures

  • Irata family
    irata
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • saham.apk
    .apk android

    diwix.gorbah.com

    .main


  • layout.bal
  • main.bal
  • port.txt

Android Permissions

saham.apk

Permissions

diwix.gorbah.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

diwix.gorbah.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS