General

  • Target

    NEAS.367812cbb93de915bef027b675a40d11dba20e3a62b2e4bef52716dbde64dd08.apk

  • Size

    2.8MB

  • MD5

    4768b5db23fa96a7b7121147ae9f9377

  • SHA1

    1e85dd748a694e5f128d4731d88c3dbb2875fb65

  • SHA256

    367812cbb93de915bef027b675a40d11dba20e3a62b2e4bef52716dbde64dd08

  • SHA512

    1161e6c24c3b3b1ede5d6cf12c1893ac7fea6e9ea8404f67788ec85cc230307b57405d7e3bf5e0b71b890123562e996632d2b236d9efd2b5e154733b0982c8b9

  • SSDEEP

    49152:aE7cczCY1JK3HTtBz6xCB9pmu1uS7bT1ZYdxtTbYG52UXnzopch0W5g4IkD:ardY10HTtN0CB9pvuS7bTvE39Xkpgd5B

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • NEAS.367812cbb93de915bef027b675a40d11dba20e3a62b2e4bef52716dbde64dd08.apk
    .apk android

    vip.app.com

    .main


  • layout.bal
  • port.txt

Android Permissions

NEAS.367812cbb93de915bef027b675a40d11dba20e3a62b2e4bef52716dbde64dd08.apk

Permissions

vip.app.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

vip.app.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SCHEDULE_EXACT_ALARM

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.CHANGE_NETWORK_STATE

android.permission.SEND_SMS