Overview

overview

10

Static

static

10

236c398b09...c6.apk

android-9-x86

7

Resubmissions

24/11/2025, 13:48

251124-q3873szkal6

01/02/2024, 10:11

240201-l8brjsceel10

Sharing

Copy URL Twitter E-mail

General

  • Target
    236c398b092c14358b149429e6cec4138c41992f64c01b99608576a2c3aa20c6
  • Size 15.5MB
  • Sample240201-l8brjsceel
  • SHA256 236c398b092c14358b149429e6cec4138c41992f64c01b99608576a2c3aa20c6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
irata

Malware Config

Signatures

  • Irata family
    irata
  • Irata payload 2 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

File Explorer

  • 236c398b092c14358b149429e6cec4138c41992f64c01b99608576a2c3aa20c6
    .apk 15.5MB

236c398b092c14358b149429e6cec4138c41992f64c01b99608576a2c3aa20c6

  • SHA256 236c398b092c14358b149429e6cec4138c41992f64c01b99608576a2c3aa20c6
  • MD5 SHA1 SHA512 SSDEEP
androidarch:arm64arch:arm

  • Irata payload

com.beahan.marjoram.damonornv.zemlak

Android Permissions

236c398b092c14358b149429e6cec4138c41992f64c01b99608576a2c3aa20c6

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.REORDER_TASKS

com.google.android.gms.permission.AD_ID

android.permission.VIBRATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.FOREGROUND_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.POST_NOTIFICATIONS