General

  • Target

    a440de087406d48aff9e82faa3948ab8.bin

  • Size

    1.5MB

  • MD5

    257729f999101244a207bd413eab9cd8

  • SHA1

    c7d3b196af45bb75f00b681fb297f8faa2d2fa7f

  • SHA256

    fc9055ca650e449a44e33f4bee140836b3f9fb0ac43c2712989d95bd4e6035b5

  • SHA512

    e4afd1cb573d2d755dd4244f5d04d28cc152673707defb7ab7509d0a7b0e2471318cce676cb65332c2631f0f41f0cb79e85f5cf8168e54f5dec3dcaacf77ae9f

  • SSDEEP

    49152:7sKCjDR5RGvigpJkfBof0dA4CserJXquoa9X:3CfRXGacf0disKqGp

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • a440de087406d48aff9e82faa3948ab8.bin
    .zip

    Password: infected

  • 33703f0f63c25412817010d8e76b6fda5ad5e10af319ba3ea9e52c242448c101.apk
    .apk android

    Password: infected

    com.lyufo.play

    .main


  • pu.txt