Overview

overview

10

Static

static

10

NEAS.809d9...pk.apk

android-9-x86

7

NEAS.809d9...pk.apk

android-10-x64

7

NEAS.809d9...pk.apk

android-11-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.809d9203dae17f720a45135e8e4aef56648819f748689eb801bf832259230cffapk.zip

  • Size

    2.1MB

  • MD5

    13ce7a6b853399e12f562c1214b20fc3

  • SHA1

    f0afc80ee957462d459d423c9be82f67f67810d8

  • SHA256

    809d9203dae17f720a45135e8e4aef56648819f748689eb801bf832259230cff

  • SHA512

    fbcc3bc159bfaec3005f883435a7aabc618418200f1664c97f505209365c02f5df44bfe5a5e429e6a8a92595ad1e641d4a7c6aa0aa85c5f20c55097340cc6805

  • SSDEEP

    49152:LnJawJVzyVkhsCdg204EFB7GGeW79qDAzEt/Pqjvb0AK3tHpB17m3Us8rG:LJawJVzvhsag2fEWahadt/S7wAAwR8rG

Score
10/10
irata

Malware Config

Signatures

  • Irata family
    irata
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • NEAS.809d9203dae17f720a45135e8e4aef56648819f748689eb801bf832259230cffapk.zip
    .apk android

    com.MrXnxVip.global

    .main


  • layout.bal
  • port.txt

Android Permissions

NEAS.809d9203dae17f720a45135e8e4aef56648819f748689eb801bf832259230cffapk.zip

Permissions

com.MrXnxVip.global.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.MrXnxVip.global.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE