Overview

overview

10

Static

static

10

82ab112194...a5.apk

android-9-x86

1

82ab112194...a5.apk

android-10-x64

1

82ab112194...a5.apk

android-11-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    82ab11219419bc389cb12f78d9eb805d2297815f472673bb2e4d468c832114a5

  • Size

    2.0MB

  • MD5

    4ba0eefe26d249d370268139801bebf9

  • SHA1

    f21eccef88a2bce5a74fc84b917d25399b7ba6a6

  • SHA256

    82ab11219419bc389cb12f78d9eb805d2297815f472673bb2e4d468c832114a5

  • SHA512

    b0a692096a43f8f9dcde4ef768b7e721c3900f6dd30c49f18d0b28ff7c6a7c7e4319d7e30f8a081485a78bdaaebae36186e148cd637d7159a4bd1c20c1e3cd54

  • SSDEEP

    24576:UROiVNPKQsX0J7fAnO3JO99XFz4elCN0K6Xz9yy7B9PZcfJBxz0lZgobtHB/ukTA:UVzCQskJEO3Jg9t4bOnzsyvPDZgmkN2u

Score
10/10
irata

Malware Config

Extracted

Family

irata

C2

https://samanebox.tk/data/1193383322/payment/6aZY9X0c/live/index.html

https://samanebox.tk/data/1193383322/rat/XT2UWV1c/index.php?phone=

Signatures

  • Irata family
    irata
  • Requests dangerous framework permissions 2 IoCs

Files

  • 82ab11219419bc389cb12f78d9eb805d2297815f472673bb2e4d468c832114a5
    .apk android

    Caco333.siqe.holo

    ir.siqe.holo.MainActivity


Android Permissions

82ab11219419bc389cb12f78d9eb805d2297815f472673bb2e4d468c832114a5

Permissions

android.permission.INTERNET

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS