General

  • Target

    a2826ba4482e722999068a8a93783415b342e0a226c8d2539cf4abde0998f408

  • Size

    2.1MB

  • MD5

    2d7fd308f3f45b6f206f112a5e13b2c5

  • SHA1

    a9ee6d4c6d7b88a3111cea47a86fd903ea84550d

  • SHA256

    a2826ba4482e722999068a8a93783415b342e0a226c8d2539cf4abde0998f408

  • SHA512

    14d020544949fefba08a6c2da769eb81581ec6caf0b3ad914138f2b0c276a8fcc707dea4ff1c2f944f3e513a414080ded70a4989e7fbebe3e22071a6fcc4c71e

  • SSDEEP

    49152:v/MPi4tj7o2GjEhrrBatnNGVbzv2Z9ixKKTm9qbHIcQ:nqit2wEhXanNv9ixD8qTIcQ

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • a2826ba4482e722999068a8a93783415b342e0a226c8d2539cf4abde0998f408
    .apk android

    ir.PluTus.pluto

    .main


Android Permissions

a2826ba4482e722999068a8a93783415b342e0a226c8d2539cf4abde0998f408

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.PluTus.pluto.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS