General

  • Target

    c1888f4d1a64c3c6e000d7b941960f2437c5633adc87ad3f01fcf935b2e92f2d.zip

  • Size

    1.5MB

  • MD5

    3bb9b10bc6cd0bf88ae44007f1d7b9d0

  • SHA1

    411da03e3e0da032111c844d5319f46008400a04

  • SHA256

    2f8024a0c690c5e9565125db367cd515f0c84c2670c7a245b046b2a7b76850cb

  • SHA512

    38c1d429031d83de5f38eb222e78b155de606a23f3b3091e6ac778e53656468c5b0850d111a9460e9a7313df8d0e2c7a96da7883b98ff510ade0b66b8be82938

  • SSDEEP

    49152:q+9KX694mJjIolWavkYdaKTpNNmh+XUvb7dntaikOZ3:q+G69zRlDhAK9N4I6tF

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • c1888f4d1a64c3c6e000d7b941960f2437c5633adc87ad3f01fcf935b2e92f2d.zip
    .zip

    Password: infected

  • c1888f4d1a64c3c6e000d7b941960f2437c5633adc87ad3f01fcf935b2e92f2d.apk
    .apk android

    Password: infected

    com.lyufo.play

    .main


  • pu.txt