General

  • Target

    NEAS.24fa132a910a008da23c1a3669340143a35ebb72a802e6cf0ef0dfb20c3c6395.apk

  • Size

    2.6MB

  • MD5

    156b67600f32f97bfc74e634b2979c09

  • SHA1

    1e64f14308f9e0600078bbb6ea35f3abc4228718

  • SHA256

    24fa132a910a008da23c1a3669340143a35ebb72a802e6cf0ef0dfb20c3c6395

  • SHA512

    cf943b3734fcfc1d10128cc7113da5e06eeee130e394839276f9a6359249d37073f4ed61901635d6f28b6369e29d4e5e68a4372d28bf5c4182a4d27c88debc16

  • SSDEEP

    49152:QE7aUMCQj5NLumokhjIqOr7aWDk5oYHj4UeBW+HLHEwrIMS78RXm4RdHDb/:QNSoNKmokzSe6qTj9exHTEqf13RdHDb/

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • NEAS.24fa132a910a008da23c1a3669340143a35ebb72a802e6cf0ef0dfb20c3c6395.apk
    .apk android

    vip.app.com

    .main


  • layout.bal
  • port.txt

Android Permissions

NEAS.24fa132a910a008da23c1a3669340143a35ebb72a802e6cf0ef0dfb20c3c6395.apk

Permissions

vip.app.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

vip.app.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE