General

  • Target

    cdde7aae6b58f0e8b8c9255febcafc13.bin

  • Size

    1.5MB

  • MD5

    5931868e43b92d0b270e962fe672a9aa

  • SHA1

    1d65c92e202ac98ec8db04f99277c30171b1d747

  • SHA256

    71cdae47adce2ae8bc2ad9d6bae5c7e3139989dbf0a1b60dcc283e568e2979ed

  • SHA512

    028bdfe009d8328a229fa764a4337f6a36ce901dbe9efe420a89f9fdd0cfa4fbbbc00ee39eb792cfa6466d5f26ea105033c8913932ff192bb566206b6fbe3766

  • SSDEEP

    49152:3msHMDOX4vxyQTVvJNQ/5qQ6bVYOQoyr+k:2xOX8xyQTVvJw5RsjQo8

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • cdde7aae6b58f0e8b8c9255febcafc13.bin
    .zip

    Password: infected

  • 749513b603770a2a460953c729cf4e83cbba2e39668450cf3e937330ce5dced8.apk
    .apk android

    Password: infected

    com.lyufo.play

    .main


  • pu.txt