General

  • Target

    824bc8f232feb2eefdcdda66dd56baf2eb654ede2aa3f4ce2351da26900a05ca

  • Size

    2.7MB

  • MD5

    a4111f24f874e9f41b4bde70a633cf63

  • SHA1

    2c7b7c3a95e2ea65e2efcff3ce2701dd7473cfa1

  • SHA256

    824bc8f232feb2eefdcdda66dd56baf2eb654ede2aa3f4ce2351da26900a05ca

  • SHA512

    49b8fe60e55b0b4eb0b68b61c137e1ba8750e836676d32e991fdeaf65ae1589eb51ac0dcd3c9680dacdf74ef084ab7cb55453955c50819a749453cc34ebb6d39

  • SSDEEP

    49152:exnMWnuiv2ImG5Q+xAeyasyasn8ZBqCZGkYTfcXpEStu8QkXMyeK8Mz1P:AnMsuiv4G5XHn8zX/Jfu8QU/dz1P

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 3 IoCs

Files

  • 824bc8f232feb2eefdcdda66dd56baf2eb654ede2aa3f4ce2351da26900a05ca
    .apk android

    Dev.ArmaN.PortFucker

    .main


Android Permissions

824bc8f232feb2eefdcdda66dd56baf2eb654ede2aa3f4ce2351da26900a05ca

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

com.google.android.c2dm.permission.RECEIVE

Dev.ArmaN.PortFucker.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.SEND_SMS