General

  • Target

    b7822b99492aef3e51cc1761ec653508765154b18d04bf600ebbb3587fdf6dc5

  • Size

    3.3MB

  • MD5

    f4567b8361c7c1abb38e25914db2d995

  • SHA1

    ffb2c2e7f0d0a2a7b48161aadeac9e6bb406b106

  • SHA256

    b7822b99492aef3e51cc1761ec653508765154b18d04bf600ebbb3587fdf6dc5

  • SHA512

    33291aaae1317c5923669c1bf018ab8ecfe3c5ee0e03854b921b3f9f3d970393b2eaffa9481df103fbed1202ce1117458b3cbb3bcdb8d9cb0c506eff9cc6b4ff

  • SSDEEP

    98304:AEVF6aL7fDW3v0AMYfccA1d+CsqBGnrBzeUw9UWosWzij:A46x3vKcA3UnlzhwW6j

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://uskgavm.gq

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • b7822b99492aef3e51cc1761ec653508765154b18d04bf600ebbb3587fdf6dc5
    .apk android

    ir.shz.shzkisi

    .main


Android Permissions

b7822b99492aef3e51cc1761ec653508765154b18d04bf600ebbb3587fdf6dc5

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS