General

  • Target

    6e0b0ebf0e009b9390e4d80d47e8ffc2e26bc4bd1b0c980a07e689decb8eb6d8

  • Size

    2.5MB

  • MD5

    7b7a7efc35aa0aae4884657180499b90

  • SHA1

    2606e6adcd9666ceb25b3e8a7b53b3cd9c6d87eb

  • SHA256

    6e0b0ebf0e009b9390e4d80d47e8ffc2e26bc4bd1b0c980a07e689decb8eb6d8

  • SHA512

    3e7a069f6d588070b646da291bf7c1c2dd32b49d20119667c79ab72cfd663eeb3f86790dd7b84971f63ba978e3b6a847c29441072a79be6a7d7531ff8a26eaaf

  • SSDEEP

    49152:gbnLTNvDtEjI9/i7I2X1yObUUt2TdhZldPh+okVPHYvnLwxpc:gzLTRtRa8mLbUUt4dhVPhpkVQTIK

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • 6e0b0ebf0e009b9390e4d80d47e8ffc2e26bc4bd1b0c980a07e689decb8eb6d8
    .apk android

    Rahbar.Api

    .main


Android Permissions

6e0b0ebf0e009b9390e4d80d47e8ffc2e26bc4bd1b0c980a07e689decb8eb6d8

Permissions

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.READ_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

Rahbar.Api.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.DELETE_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.ACCESS_WIFI_STATE