com.drnull.v3.MainActivity
android.intent.action.MAIN
General
-
Target
02e10de505d37b4974e5fb039cbfca74.bin
-
Size
2.3MB
-
MD5
1234c98274d9e03ffc2c7f1cc95d693f
-
SHA1
348ab709a9169225a359d0a01859df85f56c2f8a
-
SHA256
c3ed07b38616500f3ea3fcb79d5acfb8f73dd921fcc4054246d38eee51325f0e
-
SHA512
f29896e0cf69e78eca86a67a36e7a3b73e9ae9da52311db65bb2655c900c390d7c78fed1f9aca988a599aaa0deaff15bac24676602c7973e0b41ecdd686a7a27
-
SSDEEP
49152:UwutKNCtElC51mDLEriBSLV71pqUb39XBLA7UWYQsXEIA:qoNCtEBc5xCOHLA7UWcA
Score
10/10
Malware Config
Signatures
-
Irata family
-
Requests dangerous framework permissions 6 IoCs
description ioc Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS
Files
-
02e10de505d37b4974e5fb039cbfca74.bin.zip
Password: infected
-
5f294cf2b48c6cc09c6ea9ff1765502362b1dd44d4a1e338b8d2da2f7df6d1d8.apk.apk android
Password: infected
com.drnull.v3
com.drnull.v3.MainActivity
Activities
Permissions
android.permission.CALL_PHONE
android.permission.INTERNET
android.permission.POST_NOTIFICATIONS
android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND
android.permission.FOREGROUND_SERVICE
android.permission.WAKE_LOCK
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.READ_CONTACTS
android.permission.ACCESS_NETWORK_STATE
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Receivers
com.drnull.v3.smsReceiver
android.provider.Telephony.SMS_RECEIVED
com.drnull.v3.FMReceiver
com.google.android.c2dm.intent.RECEIVE
com.google.firebase.messaging.directboot.FirebaseMessagingDirectBootReceiver
com.google.firebase.messaging.RECEIVE_DIRECT_BOOT
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
Services
com.drnull.v3.FMService
com.google.firebase.MESSAGING_EVENT
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
-
baseline.prof
-
baseline.profm
-
chat_id.txt