General

  • Target

    app.apk

  • Size

    1.9MB

  • MD5

    db452fd4bc28c21d09a0212c852e4dd1

  • SHA1

    f87ef60d7c133b4f2982fca65e981c7d01547671

  • SHA256

    a890b158dbbb235af90a92c0b48a0add6a8ae1e3487faee1847432c902a45d45

  • SHA512

    19832a3dc00b1f8025813f9de2d7f63ff15910dfffa89289ff6fd14ebcc4bc3c86e682ba34aa56f6be4b86140cb4bf5c0f39254340c0f8fc6691d641a9544197

  • SSDEEP

    49152:v/5Sn3lL298o3BF5qpWvIoUBBxmG74Vzxw5504W9wZbou:no3Yeo3ZIWvPUBcVzxa504P

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • app.apk
    .apk android

    kisi.com

    .main


  • lmain.bal

Android Permissions

app.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

kisi.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS