General

  • Target

    NEAS.5f294cf2b48c6cc09c6ea9ff1765502362b1dd44d4a1e338b8d2da2f7df6d1d8apk.zip

  • Size

    3.4MB

  • MD5

    02e10de505d37b4974e5fb039cbfca74

  • SHA1

    04e45c13f97eed296a225dfb6c986f0b3c934c29

  • SHA256

    5f294cf2b48c6cc09c6ea9ff1765502362b1dd44d4a1e338b8d2da2f7df6d1d8

  • SHA512

    55ed47d3bb311c69ab2ff9ea122650b43d5ec240f06dd4496834911b9698d4b73cdb4224a23bcb3e199fe303d6a57b1239dc5f1ceb89aeaea69381b866a13512

  • SSDEEP

    49152:xO3sHnRM11HxgDgLCr8MJ16Hm13PJTSYWkPM8NS5FrBbxhYZFyCz:xO3shgLCr8MiHK3PgYWkPM7Fr5NCz

Score
10/10

Malware Config

Signatures

  • Irata family
  • Requests dangerous framework permissions 6 IoCs

Files

  • NEAS.5f294cf2b48c6cc09c6ea9ff1765502362b1dd44d4a1e338b8d2da2f7df6d1d8apk.zip
    .apk android

    com.drnull.v3

    com.drnull.v3.MainActivity


  • baseline.prof
  • baseline.profm
  • chat_id.txt

Android Permissions

NEAS.5f294cf2b48c6cc09c6ea9ff1765502362b1dd44d4a1e338b8d2da2f7df6d1d8apk.zip

Permissions

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION