General

  • Target

    4d1e061ef07161343f193eaf08d29d36a6fa55166f881d6bf8c24aa77fce703a

  • Size

    7.9MB

  • MD5

    06b5b1777001fc8baffbff4d7e596078

  • SHA1

    bb437c9683924f72db59673e1f597584d8e88b97

  • SHA256

    4d1e061ef07161343f193eaf08d29d36a6fa55166f881d6bf8c24aa77fce703a

  • SHA512

    799f4f9e03c2c63f5d8c23980adc258374200fd2c7ce36299e9bfac9596b5618af00a91b2a6e0e83656c64175d65be324b65aaf4e18c0f147019925f3dc965f9

  • SSDEEP

    196608:5UTni+GTCmO0KaVT5j3v7oZVWpbw5JvKRqWoMiKuNSKoPA3No:STi+GTHO0KyTd3v7gVWpbw5HWQXNSKWR

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 2 IoCs

Files

  • 4d1e061ef07161343f193eaf08d29d36a6fa55166f881d6bf8c24aa77fce703a
    .apk android

    amozash.parvaresh.gharch

    .main


Android Permissions

4d1e061ef07161343f193eaf08d29d36a6fa55166f881d6bf8c24aa77fce703a

Permissions

com.farsitel.bazaar.permission.PAY_THROUGH_BAZAAR

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.c2dm.permission.RECEIVE

aandroid.permission.RECEIVE_BOOT_COMPLETED

amozash.parvaresh.gharch.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_COARSE_LOCATION