General

  • Target

    app_2.apk

  • Size

    2.6MB

  • MD5

    c93b941b651c60fbac0c4b7ed074fc43

  • SHA1

    ec8657f364574c5ef5deffeb69cab9472387373b

  • SHA256

    80eda7033269de92848ac375cfdf33b0decc441bc963fa69cf12eb300aa4669b

  • SHA512

    c5fff5238ee1487365941cdccba9174f3d3e4a3a2fab152fb71fe87aa2637f263b7fdb077eba4c8370ffa5e1baeabdb2a968cbf69ad2e64fd7fcafee7660138c

  • SSDEEP

    49152:U7sXkkQEXKEZwudRpetijpOVWFZ5Rr9Abxn+svL5iJwiFwHWkmYL+3vg:UwkkvXwi9OVWTJ/sjb4wHWkmXo

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • app_2.apk
    .apk android

    com.lyufo.play

    .main


Android Permissions

app_2.apk

Permissions

com.lyufo.play.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.lyufo.play.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY