General

  • Target

    NEAS.0f451f48753583a8d35cc0597f09d206a1af301dc03de9ffe55dedfaf734d574.apk

  • Size

    4.1MB

  • MD5

    f272f77ca75cc494ce1ec13713b6fd5f

  • SHA1

    6a5a247c864ceb0978cfbabf320c7b4e1798e69d

  • SHA256

    0f451f48753583a8d35cc0597f09d206a1af301dc03de9ffe55dedfaf734d574

  • SHA512

    ae1f1cd3ae61b60d2393657bea4df3c4dfd51038b98fe9bfd98b049f7c92a3d9473a561e335f8cada3a1baaf778a0f9740f3cb6665ae33cb89e96964f8b91f94

  • SSDEEP

    49152:IcdJ/gUMAnfjVnn111HxgDgLCr8MqKCg12k0lk9eNS3p/FFjphkl:IcdRgUBfjygLCr8MqZg12k0eDVzv8

Score
10/10

Malware Config

Signatures

  • Irata family
  • Requests dangerous framework permissions 6 IoCs

Files

  • NEAS.0f451f48753583a8d35cc0597f09d206a1af301dc03de9ffe55dedfaf734d574.apk
    .apk android arch:arm arch:x86 arch:arm64 arch:x64

    com.drnull.v3

    com.drnull.v3.MainActivity


  • baseline.prof
  • baseline.profm
  • chat_id.txt

Android Permissions

NEAS.0f451f48753583a8d35cc0597f09d206a1af301dc03de9ffe55dedfaf734d574.apk

Permissions

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION