General

  • Target

    9b9c2e0bdf5480aabbd0ab79de16a826bdbd11a142ce117e3f49f44b0b91f4c7

  • Size

    2.0MB

  • MD5

    dc9f73c8ec88a8b493a15a3cbcb36f15

  • SHA1

    29a918ace8255bb2da4c31d4781acdcfdbee2413

  • SHA256

    9b9c2e0bdf5480aabbd0ab79de16a826bdbd11a142ce117e3f49f44b0b91f4c7

  • SHA512

    ae3f46396092bdfbfb9d6bb01ff96e5eaa6b19512caf0ea127750e8f629d5c8b6fe4840ff59abd83736af0182be6d4d704d9f62d60f365f0636c2e3192d3bb7f

  • SSDEEP

    49152:jrEZhWeMoyr3SCIVjZTqErr3I/UIFL4paQ0CryEcYWfcy71:6hWeLyrCCSZTq2YjFL4p5rzcYq1

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 9b9c2e0bdf5480aabbd0ab79de16a826bdbd11a142ce117e3f49f44b0b91f4c7
    .apk android

    ir.PluTus.pluto

    .main


Android Permissions

9b9c2e0bdf5480aabbd0ab79de16a826bdbd11a142ce117e3f49f44b0b91f4c7

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.PluTus.pluto.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS