General

  • Target

    aa72af92ebc2c7b250aa8cc1df6b8ee1fce190c1a6a715e9af99efc4de8ab10a

  • Size

    2.0MB

  • MD5

    b0c47f35a0d1e5405af9d7719b039f76

  • SHA1

    c05603cc4aa158ce3df652a42dafa71b5d3b19d1

  • SHA256

    aa72af92ebc2c7b250aa8cc1df6b8ee1fce190c1a6a715e9af99efc4de8ab10a

  • SHA512

    d2c565c1053b7359738210ee9000bdc043b2deb55eb558b0e992dd9cc26effd71d85c26133d592431f17e18e77dd54e3e0d28aac17c514a2e448bd42560cfb35

  • SSDEEP

    49152:S9VUpN3Ns+/28MfYt3ihAkUG5WvxU9FdMlsZY9ZxMR:IM3Ns+/f8YtyivxgsoY96

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • aa72af92ebc2c7b250aa8cc1df6b8ee1fce190c1a6a715e9af99efc4de8ab10a
    .apk android

    com.rez.ir

    .main


Android Permissions

aa72af92ebc2c7b250aa8cc1df6b8ee1fce190c1a6a715e9af99efc4de8ab10a

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.rez.ir.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS