General

  • Target

    7fa69915ce00c67d27276f9837fbd0f948fb55e76b87a56ccc3d4b4a49833141

  • Size

    2.2MB

  • MD5

    9825aac0408eae37785588cdcb3adefb

  • SHA1

    6bb124de1e6a6b3cf3be8aa509a5154ba9732db3

  • SHA256

    7fa69915ce00c67d27276f9837fbd0f948fb55e76b87a56ccc3d4b4a49833141

  • SHA512

    9c370ece56c50f3db3489a2103d7920f737e932affd184b73b8231379f278b77ade22b614dfccd7fe159b0ca2290e1fa7102d323f60f6e5122b068ca7c97b94a

  • SSDEEP

    49152:LEiE57LMSK7ZrVNJmZx+KYNI83a31447ep4toOj40:LgxLj8XJ4x+KY2Yi14ex

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://sleepbam.ml/data/60601/index.php

https://sleepbam.ml/data/60601/sms5.php?phone=

Signatures

  • Irata family
  • Requests dangerous framework permissions 2 IoCs

Files

  • 7fa69915ce00c67d27276f9837fbd0f948fb55e76b87a56ccc3d4b4a49833141
    .apk android

    Caco333.siqe.holo

    ir.siqe.holo.MainActivity


Android Permissions

7fa69915ce00c67d27276f9837fbd0f948fb55e76b87a56ccc3d4b4a49833141

Permissions

android.permission.INTERNET

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS