Overview

overview

10

Static

static

10

8b10d29548...06.apk

android-9-x86

6

8b10d29548...06.apk

android-10-x64

6

8b10d29548...06.apk

android-11-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    8b10d29548d66e9ff9d9241505e09b24425e38453991a41ea3836ca2c3223a06

  • Size

    3.3MB

  • MD5

    0b3b3c9fc527fcef6c6fd3b6ad4aae4d

  • SHA1

    87133d552f82675a155b576972922d7d1d88de07

  • SHA256

    8b10d29548d66e9ff9d9241505e09b24425e38453991a41ea3836ca2c3223a06

  • SHA512

    d29df568b5b708baca8b2224ccf63c0cfda98773b44e1935fe7b409511230cfa043d547df0d5581bd1857c33bb3875f125c7066d6ff5c7802199edd871503874

  • SSDEEP

    98304:IEVF6aL7fDW3v0AMYfccAhmg/+Vv2+c9vhG1uP6J6tSiu+ik:I46x3vKcAEgGVXc9JPZ+3k

Score
10/10
irata

Malware Config

Extracted

Family

irata

C2

https://edaltiir.ml

Signatures

  • Irata family
    irata
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 8b10d29548d66e9ff9d9241505e09b24425e38453991a41ea3836ca2c3223a06
    .apk android

    ir.shz.shzkisi

    .main


Android Permissions

8b10d29548d66e9ff9d9241505e09b24425e38453991a41ea3836ca2c3223a06

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS