Resubmissions

22/02/2024, 11:08

240222-m8kvwsgb6y 10

22/02/2024, 10:36

240222-mm8ptsgd56 10

General

  • Target

    eblagh (3).apk

  • Size

    3.4MB

  • MD5

    fb469b2453333babf92789c8a05b7019

  • SHA1

    eaa47b8dbc32ebb7d2d090f41ed6eac8793e6388

  • SHA256

    9334d10838e3482cb33e6130ea8397c30cc9edacd9597f1c21aa321d736cd80f

  • SHA512

    dea36e544d2529407a9334dc7e175eebe9f060d7926db0af1400e3cb3c7505cb6d200919c5043d58322bc12fae2d36a46e55f5dec1b86eeb40f9cb3905f12519

  • SSDEEP

    98304:RA+u4Y1sNALlOUajvXoTwr5qr5+l9ks5TJGAK86j:RAk8OdgtuJgj

Score
10/10

Malware Config

Signatures

  • Irata family
  • Requests dangerous framework permissions 7 IoCs

Files

  • eblagh (3).apk
    .apk android arch:arm arch:x86 arch:arm64 arch:x64

    com.drnull.v5

    com.drnull.v5.MainActivity


Android Permissions

eblagh (3).apk

Permissions

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.drnull.v5.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION