General

  • Target

    app.apk

  • Size

    2.6MB

  • MD5

    217d5c8122c77f7ee51af68cda89d595

  • SHA1

    b60709fbe47731811c7360934ec7783d54696d21

  • SHA256

    30ee90c880e5a11e6e1772ca9abbb939a5e9220b23d800d943f7d64d83573ad0

  • SHA512

    d90a02e7c9d8f3cf9adad2ed63ccd9532a0a89cee6c9275a3c3ea4009a308367d97077a414d2da5489dc0f2db76c136080c39746a6b79fd9635596ac88ba4573

  • SSDEEP

    49152:qRE7OIBTSat0ptL9P5gEFCIpTNQ6RBCO4AwBsJh4pTHH4OPDNiVC:qRFiTL+pV9P5gEFCIp5Qk6A141BPxx

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • app.apk
    .apk android

    vip.app.com

    .main


Android Permissions

app.apk

Permissions

vip.app.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

vip.app.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.POST_NOTIFICATIONS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.READ_PHONE_STATE

android.permission.CHANGE_NETWORK_STATE