irata | NEAS[.]073de9ade3a00c3c1624c7fac5696e7b8dcce402358458258513df31a8d9e1a3apk[.]zip

General

Target
NEAS.073de9ade3a00c3c1624c7fac5696e7b8dcce402358458258513df31a8d9e1a3apk.zip
Size 4.1MB
Sample231204-tshtxscf79
SHA256 073de9ade3a00c3c1624c7fac5696e7b8dcce402358458258513df31a8d9e1a3
MD5 158d091417dccd17a5c1761fd15bcd04
SHA1 ecab4bc07eafe8ed9f7bafedb4e6ecee0007aca1
SHA512 b0cef455413a1e1ba2a2e014865548efa5398f08e0991c37ce6586902025b6200d9c527352558433ef7ab93643290f47aae98c5986160c63aa5277ac8493b70f
SSDEEP 98304:JLtci79c8WdLqyXgDrhgLCr8Y+9pHAcAGKEdtL5:J5FhcLdJQv+Xw0dx5
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

irata

Malware Config

Signatures

Irata family
irata

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

File Explorer

NEAS.073de9ade3a00c3c1624c7fac5696e7b8dcce402358458258513df31a8d9e1a3apk.zip

.apk 4.1MB

NEAS.073de9ade3a00c3c1624c7fac5696e7b8dcce402358458258513df31a8d9e1a3apk.zip

SHA256 073de9ade3a00c3c1624c7fac5696e7b8dcce402358458258513df31a8d9e1a3
MD5 158d091417dccd17a5c1761fd15bcd04
SHA1 ecab4bc07eafe8ed9f7bafedb4e6ecee0007aca1
SHA512 b0cef455413a1e1ba2a2e014865548efa5398f08e0991c37ce6586902025b6200d9c527352558433ef7ab93643290f47aae98c5986160c63aa5277ac8493b70f
SSDEEP 98304:JLtci79c8WdLqyXgDrhgLCr8Y+9pHAcAGKEdtL5:J5FhcLdJQv+Xw0dx5
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86 arch:arm64 arch:x64

com.drnull.v3

Android Permissions

NEAS.073de9ade3a00c3c1624c7fac5696e7b8dcce402358458258513df31a8d9e1a3apk.zip

Permissions

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

NEAS.073de9ade3a00c3c1624c7fac5696e7b8dcce402358458258513df31a8d9e1a3apk.zip

com.drnull.v3.MainActivity

com.google.android.gms.common.api.GoogleApiActivity

com.drnull.v3.smsService

com.drnull.v3.FMService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.drnull.v3.smsReceiver

com.drnull.v3.FMReceiver

com.google.firebase.messaging.directboot.FirebaseMessagingDirectBootReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

NEAS.073de9ade3a00c3c1624c7fac5696e7b8dcce402358458258513df31a8d9e1a3apk.zip

com.drnull.v3.MainActivity

com.google.android.gms.common.api.GoogleApiActivity

com.drnull.v3.smsService

com.drnull.v3.FMService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.drnull.v3.smsReceiver

com.drnull.v3.FMReceiver

com.google.firebase.messaging.directboot.FirebaseMessagingDirectBootReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

NEAS.073de9ade3a00c3c1624c7fac5696e7b8dcce402358458258513df31a8d9e1a3apk.zip