Overview

overview

10

Static

static

10

NEAS.e598c...pk.apk

android-9-x86

1

NEAS.e598c...pk.apk

android-10-x64

7

NEAS.e598c...pk.apk

android-11-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e598c24fea9ff6295f6c49652486e3719e1e0837813e08c8ac4aad962e1dbc79apk.zip

  • Size

    2.6MB

  • MD5

    c8dfef0abcc80cd688965765ba15deef

  • SHA1

    32d47559a15571a4e0f1300a61b84c7d00f8764e

  • SHA256

    e598c24fea9ff6295f6c49652486e3719e1e0837813e08c8ac4aad962e1dbc79

  • SHA512

    9c9f600f2ba9a65c4e4ea2b440d61505afe58ace5c83d70439717eb9f6696514973fd72e6364130fc80cfc42795d33fdbe770fd4170fa4f935569d8f646ae063

  • SSDEEP

    49152:HNFOp/cBT2DN3cycC7mhVlvZXukxOQgpWk9L53yJdT9cOuKo2qwUVmyM:tQp/cBT2B3pcC7mRmdzL5CJdTWr8L

Score
10/10
irata

Malware Config

Signatures

  • Irata family
    irata
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • NEAS.e598c24fea9ff6295f6c49652486e3719e1e0837813e08c8ac4aad962e1dbc79apk.zip
    .apk android

    diwix.gorbah.com

    .main


  • layout.bal
  • main.bal
  • port.txt

Android Permissions

NEAS.e598c24fea9ff6295f6c49652486e3719e1e0837813e08c8ac4aad962e1dbc79apk.zip

Permissions

diwix.gorbah.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

diwix.gorbah.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS