General

  • Target

    17fa0b6b9e6441fa69771d61bc02c9aa.bin

  • Size

    1.5MB

  • MD5

    2452f2575b4d233a026920ca37396ec4

  • SHA1

    6a6a4cdf8a80189315957a59b9607ffeaecad354

  • SHA256

    a717cf6809ea8e29e2b64c22e913d3cd398fbded31097069853ea26594f78e2f

  • SHA512

    2c1794a35319af7076c864bf715b226b30e3223017d9f8ad12d6eadf9d2ed0514af5b6d8dcdd346e7ab24339e066b35f76fe3e6e7b4f13ec4e348cfdf4cd8fab

  • SSDEEP

    24576:85CXeA+WXkrC5lQ6LS6p5uh+OfIR+1K6oKrURjuqTchHVEkmJJ74BsLay8FMMaJQ:82cIpL9zuhrK2qfkm4ny8FMdJf1m

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • 17fa0b6b9e6441fa69771d61bc02c9aa.bin
    .zip

    Password: infected

  • 97a935851624cde72d584c09f03b96cd6b204ebf58d7ecd5fabab202ecda8583.apk
    .apk android

    Password: infected

    com.lyufo.play

    .main


  • pu.txt