General

  • Target

    8482623610d437f8107454db8a518d15f7ed7529b3b081dd606a47c6de50cff7

  • Size

    2.1MB

  • MD5

    eacdab47fb5345749e40a4092bf1080f

  • SHA1

    5d177387b6cfc1fe2742fa3fa3b02387f2e474a7

  • SHA256

    8482623610d437f8107454db8a518d15f7ed7529b3b081dd606a47c6de50cff7

  • SHA512

    1f39e2e6e8ec0182b1c01b4a941929c461de39e4421767bf3ddcf4e73e3a786ef35baa091ac757c01df179040cf7f902079a511196d1c637a4efe317d536f6a6

  • SSDEEP

    49152:Z/0MofpfMSSSSSSSSSSSSSSSSSSSSSSSSaY2G1cU/r2RM2rsvgcVep0ev3yHtq7g:B0xxfMSSSSSSSSSSSSSSSSSSSSSSSSaC

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 8482623610d437f8107454db8a518d15f7ed7529b3b081dd606a47c6de50cff7
    .apk android

    com.rez.ir

    .main


Android Permissions

8482623610d437f8107454db8a518d15f7ed7529b3b081dd606a47c6de50cff7

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.rez.ir.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS