General

  • Target

    8cfec8fa2f09d0d7d3b8f9a07d45e2b709c1cd5785964f7c745b81fb8a472c8e

  • Size

    3.3MB

  • MD5

    33b2e37b4ee06fa3b1e3fb0879c6f596

  • SHA1

    50254ed9e4e13a3fca6470c83dcd9b06171af8dd

  • SHA256

    8cfec8fa2f09d0d7d3b8f9a07d45e2b709c1cd5785964f7c745b81fb8a472c8e

  • SHA512

    d98196dac60a90680d75ee64bd2467c29284864e4f99aa9c2e5946955b7379be3ded0a49ca80062c47e8222b0305c36ce0a0290435e17cdd31371da3286f0511

  • SSDEEP

    98304:kEVF6aL7fDW3v0AMYfccAhR+QRodxH8l37GiK:k46x3vKcAhR+QRodxH4vK

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://pubumlive.tk

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 8cfec8fa2f09d0d7d3b8f9a07d45e2b709c1cd5785964f7c745b81fb8a472c8e
    .apk android

    ir.shz.shzkisi

    .main


Android Permissions

8cfec8fa2f09d0d7d3b8f9a07d45e2b709c1cd5785964f7c745b81fb8a472c8e

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS