General

  • Target

    saham.apk

  • Size

    2.7MB

  • MD5

    d78baa1bfca2d6a062dba372e39e2755

  • SHA1

    3fabbecd982add0ab97f9cbabb2f446ea8953521

  • SHA256

    92d28775d0fcc36c94e81891dc5fa0cd51e390b4fee0b835fdcb129f545b926c

  • SHA512

    812003bc8beb4dcd6688ba93418cba90dae0f8ce0eff24395db23b42996b2d3d5e61321db0349d0912de1c84aac99d64f2f77537cd607c83f722b9bd998f5d1d

  • SSDEEP

    49152:t/6Et3Ep8zZJ3iFLaVkudUA0hI0j6jDnQCTWLaA+s2QI1rNkfViedgVq8Wo:l6Y9vyFaVrdUZmemQCTWOA+s3Wr2fVN0

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • saham.apk
    .apk android

    vip.app.com

    .main


Android Permissions

saham.apk

Permissions

vip.app.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

vip.app.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE