General

  • Target

    app.apk

  • Size

    1.9MB

  • MD5

    ad6ce95b509e084612dba688ccdd919a

  • SHA1

    f70a24f2428708b1476e2041b4fe7a9ee46f1f4d

  • SHA256

    a7420fc26e74c2bc885015b749fa4504ea19dd08fdbff9412ee028ec23ea83e0

  • SHA512

    b0e5c530b6ead755c4daf4b5feaba0d539438684752d360f577e3df8ea7290c465bbea4e1cf4ed1cc83f7cda88e890d79cf69dc767d454d4c0e7d904d0f8c934

  • SSDEEP

    49152:w/JMStoogu9CZ0lCG59UJaAR0XABAEAzVuwqiu:eJlRgu9CmlCauaACXEAluwqx

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • app.apk
    .apk android

    kisi.com

    .main


  • lmain.bal

Android Permissions

app.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

kisi.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS