General

  • Target

    87656ec1e010d614fe1b78f9969eed4201fcd835f4b36727372c688f6caa226c

  • Size

    2.0MB

  • MD5

    3908586a212d5d0376b1a4316f08f32e

  • SHA1

    dd2467ce611634a61eecc20c76ec5c5d3bea8ca0

  • SHA256

    87656ec1e010d614fe1b78f9969eed4201fcd835f4b36727372c688f6caa226c

  • SHA512

    04dbb39fcfa3d994460b603d391c7c80eecdba30cb0583e970a79a7f2b9ed5311415f1b66e11fab00fb7bf6b2bb9f7baf7154346b4be3b58c349ac322bb1f386

  • SSDEEP

    49152:I2UjvC1z1l0c6u4IKa58Bf24DJe1jzj+bzZBZuagOvjNqMhyM4px74uQtVd:I2qaV0c6H1nfdY1r+BjDgED

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://reg-shaprqk.cf/Chat/?e=87570

https://reg-shaprqk.cf/SmsRequest.php?phone=

Signatures

  • Irata family
  • Requests dangerous framework permissions 2 IoCs

Files

  • 87656ec1e010d614fe1b78f9969eed4201fcd835f4b36727372c688f6caa226c
    .apk android

    realrat.siqe.holo

    ir.siqe.holo.MainActivity


Android Permissions

87656ec1e010d614fe1b78f9969eed4201fcd835f4b36727372c688f6caa226c

Permissions

android.permission.INTERNET

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS