General

  • Target

    NEAS.ae7e8cdda4abb74afb49da15ec606d031b2ba26a48cbbc77cc71dee9057b866d.apk

  • Size

    2.6MB

  • MD5

    e8998bb28804830649ad87c34ecc9dc0

  • SHA1

    a1cdb8e24d4e3160ad6296568a5e7b58313c7ff2

  • SHA256

    ae7e8cdda4abb74afb49da15ec606d031b2ba26a48cbbc77cc71dee9057b866d

  • SHA512

    2557b386ff7625bd7dc55fe2d0aae545986d2645f6a2d06f4d85c9317aaea81bcac4ab67dbf31b23db423eb337abd7ccbc2b1626f749f578bd0b0ce3dfb6ccb9

  • SSDEEP

    49152:H2FOp/cBT2DN3cycC7mhVlvZXukxOQgpWk9L53yJdT9cOuKo2qwUVmyl:WQp/cBT2B3pcC7mRmdzL5CJdTWr8o

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • NEAS.ae7e8cdda4abb74afb49da15ec606d031b2ba26a48cbbc77cc71dee9057b866d.apk
    .apk android

    diwix.gorbah.com

    .main


  • layout.bal
  • main.bal
  • port.txt

Android Permissions

NEAS.ae7e8cdda4abb74afb49da15ec606d031b2ba26a48cbbc77cc71dee9057b866d.apk

Permissions

diwix.gorbah.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

diwix.gorbah.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS