General

  • Target

    latest.apk

  • Size

    5.3MB

  • MD5

    d453ae58e65361f16e8d90887d8f31b1

  • SHA1

    1d537a8705cccd1bcf70b01be0d17a4204de2982

  • SHA256

    9e80107dd792216e7c4a2a5ffe0a2b866c912b09a765c316c11ad4a63a297307

  • SHA512

    a1890ce713d33c77d7252538afd68cdfc6314bbb6fdbeb301de05f8526ecc8cbd006858f36c0b2f152aa0bca8ddf845c4ea66d2f5809fdba258a4f99f3ce9ab0

  • SSDEEP

    98304:c1BqGju1aj21b+ZZtOMWcoPic1pw9F5Pd/HABh0eggLCr8Je+:mBqgB2b+cUoKc1pw9H5GHe+

Score
10/10

Malware Config

Signatures

  • Irata family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • latest.apk
    .apk android arch:arm arch:x64 arch:x86 arch:arm64

    com.drnull.v3

    com.drnull.v3.MainActivity


Android Permissions

latest.apk

Permissions

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION