General

  • Target

    7bd7b2a01fcab8627fc015aa6e32970817d8fdd34fcf1b86841e7a85562a31bf

  • Size

    5.3MB

  • MD5

    fd33c12441891da794c6e300365a3b66

  • SHA1

    92ca4fcfe610695e110b19fede607c92b3e982df

  • SHA256

    7bd7b2a01fcab8627fc015aa6e32970817d8fdd34fcf1b86841e7a85562a31bf

  • SHA512

    b2c0c6093d22a346feb2a7e9f0cdd8e79e5d955b3cccd915492192a40b61f653225faf2ed5bb57318361924ccd1bdf885615bca604033404e616b25616747f53

  • SSDEEP

    98304:h9Ml79oQH9J9x9dtY9+Wn9rzQfjTC9YH16/Nf+ySZlCFFtowCzcSmx1kL3QxrfpL:niC9YVJyYu4JzcSWL

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://nima-12.ml/R/62635/live.php

https://nima-12.ml/R/62635/sms.php?phone=

Signatures

  • Irata family
  • Requests dangerous framework permissions 6 IoCs

Files

  • 7bd7b2a01fcab8627fc015aa6e32970817d8fdd34fcf1b86841e7a85562a31bf
    .apk android arch:arm arch:arm64

    realrat.siqe.holp

    ir.siqe.holo.MainActivity


Android Permissions

7bd7b2a01fcab8627fc015aa6e32970817d8fdd34fcf1b86841e7a85562a31bf

Permissions

android.permission.INTERNET

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.READ_LOGS

android.permission.FLASHLIGHT

net.dinglisch.android.tasker.PERMISSION_RUN_TASKS

android.permission.BLUETOOTH_ADMIN

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.USE_FINGERPRINT

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.BLUETOOTH

android.permission.WRITE_SETTINGS

android.permission.READ_SETTINGS