Overview

overview

10

Static

static

10

9f49ab944a...21.apk

 

9f49ab944a...21.apk

android-10-x64

6

9f49ab944a...21.apk

android-11-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    9f49ab944a114c56f7be727d7252a69a32bedb44826faf04eb5cec06dafd9221

  • Size

    3.4MB

  • MD5

    12856c99efa66d3ed87909a76e00070c

  • SHA1

    0e3d3f6b57c1218d674b66266e1c231e2600a332

  • SHA256

    9f49ab944a114c56f7be727d7252a69a32bedb44826faf04eb5cec06dafd9221

  • SHA512

    b3382bd5c484e41a6df9dfc3e8670c7d48685137638083b3c3ba6f94dee0579d60713c77b40989904f468f9cda2135dbfd0afd62562220f357f625567c9317a7

  • SSDEEP

    49152:j/1UJSHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqqhH1yH4Kol9JaGb0WmEIwoTP:riu6efffnRcj7jGPJqqhVa2HIL3f

Score
10/10
irata

Malware Config

Extracted

Family

irata

C2

https://ueblghukm.gq

Signatures

  • Irata family
    irata
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 9f49ab944a114c56f7be727d7252a69a32bedb44826faf04eb5cec06dafd9221
    .apk android

    ir.shz.shzkisi

    .main


Android Permissions

9f49ab944a114c56f7be727d7252a69a32bedb44826faf04eb5cec06dafd9221

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS