General

  • Target

    77f1ea007f0af7873074872bee03e8953d572097de04ea871d1fe245f6d6af4b

  • Size

    2.0MB

  • MD5

    17a82fd6bc8947470ad4a16ba2f5eccd

  • SHA1

    ef299347b24d007a26ec7221d26488d0b0603b4e

  • SHA256

    77f1ea007f0af7873074872bee03e8953d572097de04ea871d1fe245f6d6af4b

  • SHA512

    1910cb10697c7ff67b667f281610a6787019762c3434a86a87169802f6ccff27cc1a498becae2def000bf3be9a9e573d871f1501f51903206265b3b296671387

  • SSDEEP

    24576:pv+hD5Q6tSAulcGExrXtsH1dyGN5hDgLhUm/uquXq+1yDouuAUl4IcNOEf3q9d+j:pkKhL+9yhDgBWqN+hLlQNONj+/vgN4x

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://iranplms.ml/data/96197/index.php

https://iranplms.ml/data/96197/sms5.php?phone=

Signatures

  • Irata family
  • Requests dangerous framework permissions 2 IoCs

Files

  • 77f1ea007f0af7873074872bee03e8953d572097de04ea871d1fe245f6d6af4b
    .apk android

    Caco333.siqe.holo

    ir.siqe.holo.MainActivity


Android Permissions

77f1ea007f0af7873074872bee03e8953d572097de04ea871d1fe245f6d6af4b

Permissions

android.permission.INTERNET

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS