General

  • Target

    saham.apk

  • Size

    2.7MB

  • MD5

    4623f28362d79e71560446b9c198c0fc

  • SHA1

    03da65c476f88692ce85d6ea279817a31ce01e90

  • SHA256

    0d5f72bf76181750cf90f3a4cf1a51e001da573176c3eea526236f672c97d516

  • SHA512

    bc8badd34b1ec01666b9a5c3fac25aaeeb779f7a28d17d6aad80529e6a577afdc68586b953fc329468d8e8210a0c0a9ff081ad87b2591288d63277b7e5c73317

  • SSDEEP

    49152:x/6E+RkEnc9/lO7r96oZqJzkr3J/v/NHd0f4WBPLuUH54jWM9W4:Z6lkEnAdO7r96GUzA3J/3xdmd9DH546S

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • saham.apk
    .apk android

    vip.app.com

    .main


  • layout.bal
  • port.txt

Android Permissions

saham.apk

Permissions

vip.app.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

vip.app.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE