General

  • Target

    ad717ebf3c5efad68af0a3221ba3d2d6ee27682e1f2c303fe2f9caf181448d46.apk

  • Size

    3.3MB

  • MD5

    0fe5393bc55cd3713423f272a3133728

  • SHA1

    adc1f372220fc332e6827671fa96f1c653f21867

  • SHA256

    ad717ebf3c5efad68af0a3221ba3d2d6ee27682e1f2c303fe2f9caf181448d46

  • SHA512

    aab56d79d9af580b94414a10a97bddea70e954bf1510013631a21963169c109510c7df71e8b7cb028d7e0c4bbc108f8df1060c99673ef3bcc9f089f70f27dc0d

  • SSDEEP

    98304:9r6kkmX8scgBeGpBMqLCxP+0OVlxQcsUwTyMlfg:9eaMaBVpBMqLgmprsUwTyN

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • ad717ebf3c5efad68af0a3221ba3d2d6ee27682e1f2c303fe2f9caf181448d46.apk
    .apk android

    org.bax.project

    .main


Android Permissions

ad717ebf3c5efad68af0a3221ba3d2d6ee27682e1f2c303fe2f9caf181448d46.apk

Permissions

org.bax.project.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

org.bax.project.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS