General

  • Target

    f48f4fe1fd86912c46587acd1c1cf02a.bin

  • Size

    1.5MB

  • MD5

    c6631afe9831591b30ded585296c5b48

  • SHA1

    a408419fed16538df5ca45a16aa9130a433cd057

  • SHA256

    543bc5ed1dbb9cbbbdba418bd03ebca0f578234eaa2021318469668c1f9d0ad6

  • SHA512

    62e3737123f382004df1c5c19a96370fbf31bdd7efcd32423a2c0e3b002c442cc0b9f247080e24ee40dbdf524cc9566b441a1bb7a06d5fe1c55e4c75e1ecea59

  • SSDEEP

    49152:VgzpO0gnU+OzO50015WKmnweJihGzUQDDSehP6N:Opw/cQ0ayweJEODxl6N

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • f48f4fe1fd86912c46587acd1c1cf02a.bin
    .zip

    Password: infected

  • 93176edb58ad0e8f9b7a4611724d54abefb47df2605b64f0c334554c97c1e169.apk
    .apk android

    Password: infected

    com.lyufo.play

    .main


  • pu.txt