General

  • Target

    8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768.apk

  • Size

    3.9MB

  • MD5

    bbf2a8ed116cb34454a60641bb2d6a57

  • SHA1

    ad5b1a2d95be058511dd4b5c320a18117bbb21f3

  • SHA256

    8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768

  • SHA512

    b3e63d876995feb7a5c69778c79e2e96e98710993a4864789c6d13c1247e56e05cbabe7dab66e9573048779387f014e0bed9c50e01ea0db94482cefc0682ce09

  • SSDEEP

    98304:zGZTSHh5MkkmXx5TfPHt74OM70al0QOB9eg6CIy3lYR:zGZTSHMahVXHt74xwQ6cN9R

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • 8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768.apk
    .apk android

    org.bax.project

    .main


Android Permissions

8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768.apk

Permissions

org.bax.project.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

org.bax.project.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS