General

  • Target

    NEAS.cb1988a2e454e0b44181c337e19b4a7c8515fd3c7a73c09c00d6557baecc552e.apk

  • Size

    2.6MB

  • MD5

    ee57608e93ce1ffd78cd5b10e3b24609

  • SHA1

    d7793cdc04fd6042e916f7bb284f3ca1195305bb

  • SHA256

    cb1988a2e454e0b44181c337e19b4a7c8515fd3c7a73c09c00d6557baecc552e

  • SHA512

    60bce3f0ad08553cd848377b5a9b122203f7909170a7cf032ab7c20d507d6475544ce6b70a46ea6729bfcc797c1eaf76643b97f0544c0e0a2cd662562fff3742

  • SSDEEP

    49152:bE79w43bIRXfl2C95wslBP9EpDePVmdMi5BacTIIreDiu4yFrHy7RWEo2nWtZpYb:bylLCwC91lBPSpKPYei5BJTIIrEiho0N

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • NEAS.cb1988a2e454e0b44181c337e19b4a7c8515fd3c7a73c09c00d6557baecc552e.apk
    .apk android

    vip.app.com

    .main


  • layout.bal
  • main.bal
  • port.txt

Android Permissions

NEAS.cb1988a2e454e0b44181c337e19b4a7c8515fd3c7a73c09c00d6557baecc552e.apk

Permissions

vip.app.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

vip.app.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS