General

  • Target

    ad9f7f71d99658529e7f899f80ce6d7e.bin

  • Size

    1.6MB

  • MD5

    2ffc1db291d532dfbe2cb06bb97ac7ea

  • SHA1

    98bcd91a1d3313c7d3eaf4a27d220e786fdff2fa

  • SHA256

    bf84c6af79f737b8dfb0ff464205391bd8ecb82c481cc53ef34b6c90c701fafc

  • SHA512

    4bda6cd1d3f1ca10a4d530c829dc071151ff6720fcfeaee897b3db2f243656c9696b8640d8acf1f507811e114f070eca7a18c75a71faead4f13b317b728a5abd

  • SSDEEP

    24576:B1EsO7Qazbc02j6UlJ/osG5EDg8NiorYFe/SROaog4aoRsqrNqrJl3dYONJh4n0M:ja7BzI0iV9tnKog4xFYrJlNkOcaxKN

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • ad9f7f71d99658529e7f899f80ce6d7e.bin
    .zip

    Password: infected

  • 8a30235dc69e882d6215af215d6579288872ca5867b17c43e309f37f55437529.apk
    .apk android

    Password: infected

    com.lyufo.play

    .main


  • port.txt