General

  • Target

    NEAS.9d7986a3071e196161c8fdfd0364431680b9a0ec5b1eb61954d2504cb4123185.apk

  • Size

    2.6MB

  • MD5

    8f38148adcfa047b7ca9dbc1c825edb7

  • SHA1

    d88f7ec82cc5ac23dddca1e28e83a3f694116215

  • SHA256

    9d7986a3071e196161c8fdfd0364431680b9a0ec5b1eb61954d2504cb4123185

  • SHA512

    9572ce42a3c12239075accf9cfbcdf05fa3ad79b785cd1aa486cdfe89793e8e857f0a507bb962cd272463c0e7e3335f477a4d15e94b0c117135fc9590a23beb6

  • SSDEEP

    49152:a/sT1ZrOw38jHAv9C1KDXKMxW////ZFAUfEkgromRQHwktLuA+DyYoOuf:w6iHAv9C14Hc////ZUJEw2uA+DyVOQ

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • NEAS.9d7986a3071e196161c8fdfd0364431680b9a0ec5b1eb61954d2504cb4123185.apk
    .apk android

    use.free.self

    .main


  • b4x_fontawesome.otf
  • fields.txt
  • main.txt
  • ph.bal
  • port.txt
  • you.bal
  • you2.bal

Android Permissions

NEAS.9d7986a3071e196161c8fdfd0364431680b9a0ec5b1eb61954d2504cb4123185.apk

Permissions

use.free.self.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

use.free.self.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS