General

  • Target

    app.apk

  • Size

    1.9MB

  • MD5

    91656759344021d9e6340fd856bb728c

  • SHA1

    338754b4b8ac7a8cf8f595952a137e6bc60c0153

  • SHA256

    47d22f33aefee3a368b99e5a781cdc7afd4c6679fe366b3ce62eb8e52cbb4a50

  • SHA512

    3badf150ee0d120fb7af802eaa79c3d05529b376ef7352f026cfeda2a7166a720c4dca7c28f4db31c7faafa4ea5f7fc756885da9c0788ef5d8ec4e5a834ee942

  • SSDEEP

    49152:5/US+MqJJoOZuFVcJbvbHtlGQYSJ1stgYAFVaGhAAOlOCJ/gGsOR:hN+BJoAuavbDbv1sg7V51Oc0Z

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • app.apk
    .apk android

    kisi.com

    .main


Android Permissions

app.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

kisi.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS