irata | 83fc22732a688862d528cf76d7870dc1839fff7cd714ea4988cf8dd14a15a00a

General

Target

83fc22732a688862d528cf76d7870dc1839fff7cd714ea4988cf8dd14a15a00a
Size

2.6MB
MD5

f4a131526eb419f091b7cd973706c86b
SHA1

b2682fcdc599e1f0e745a0e3438b5da24ffcc46a
SHA256

83fc22732a688862d528cf76d7870dc1839fff7cd714ea4988cf8dd14a15a00a
SHA512

43e9707c82e8055c5beebf5068a1cefc5f5dd33136d48ad08a4a14d4da9a314d68649c8a57919ad9e910e9f73f1cb94dbd0627d01e620e4f37e54aa03084bd91
SSDEEP

49152:oUO0k/RzybS1xKBxJSmi+VhcB6h+U7wFV21SDs8NIjkU1GoKI6DO:oUODRiSPKc+FjUk8Niney

Score

10^/10

irata

Irata payload 1 IoCs

resource	yara_rule
sample	family_irata4

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers.	android.permission.BIND_WALLPAPER

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED