General

  • Target
    776f7e5a07691ae3bf4462b602ba02d04c3388cd05eeee425b5bb8c32e4878a4
  • Size 4.1MB
  • Sample231220-bjxmlsdfhq
  • SHA256 776f7e5a07691ae3bf4462b602ba02d04c3388cd05eeee425b5bb8c32e4878a4
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • irata

C2
  • https://cerpton.cu.ma/S.php?phone=

  • https://hamsar-yab-ir.ga/index1.html

Signatures

  • Irata family
  • Requests dangerous framework permissions 2 IoCs

File Explorer

  • 776f7e5a07691ae3bf4462b602ba02d04c3388cd05eeee425b5bb8c32e4878a4
    .apk 4.1MB

776f7e5a07691ae3bf4462b602ba02d04c3388cd05eeee425b5bb8c32e4878a4

  • SHA256 776f7e5a07691ae3bf4462b602ba02d04c3388cd05eeee425b5bb8c32e4878a4
  • MD5 SHA1 SHA512 SSDEEP
realrat.siqe.holo

Android Permissions

776f7e5a07691ae3bf4462b602ba02d04c3388cd05eeee425b5bb8c32e4878a4

Permissions

android.permission.INTERNET

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS