General

  • Target

    876eeb5d4435bf1ffd84e21c625f013d64c754dd03327df047b6ed4fc6bc3894

  • Size

    3.5MB

  • MD5

    c81f353a8448a9d4bbbb2aa5e3dce872

  • SHA1

    5fd74663c8b3c4c40a0130109d8c48576910ac24

  • SHA256

    876eeb5d4435bf1ffd84e21c625f013d64c754dd03327df047b6ed4fc6bc3894

  • SHA512

    46d732941659d36ec2040e92d3d1a36ed4fc729591c3f61ce2bb62d0c11d62d111ae66eefc7c7c120aa0125cbbce50b29570c246963e449de91fef77324affbc

  • SSDEEP

    98304:Pq96efffnRcj7jGPJqvZzsX5EOOzvf6Im:PyXcXgIZ2GlzC

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://iuskmmdm.tk

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 876eeb5d4435bf1ffd84e21c625f013d64c754dd03327df047b6ed4fc6bc3894
    .apk android

    ir.shz.shzkisi

    .main


Android Permissions

876eeb5d4435bf1ffd84e21c625f013d64c754dd03327df047b6ed4fc6bc3894

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS