irata | فیلم سکس لانا رودز[.]apk | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
فیلم سکس لانا رودز.apk
Size 2.1MB
Sample240223-rwce7sba92
SHA256 36aa27fae24b4db50c7c28dbe114616403a327183586590b8c4549fa0493c452
MD5 0967adee386ebd6e7118aca22d941ba3
SHA1 74677711d4ba70d8bfe6aaa5afe98fbdb45a59eb
SHA512 ab1b0c68fcf862a3acaf605c73bd2da0efec48fc9373f865e503a3fd9cf9b21ad084738f7bd514d58fb659b35973798f75d77bcc3f9dbe20f80f921fd58df982
SSDEEP 49152:yCRoTNCE1I/GNPXawqHHsIyQMMntxy3Dh7qriNbMzkBgUqKb:Jq91WGBawYHByXMtuXgobqKb
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

irata

Malware Config

Signatures

Irata family
irata

Irata payload 1 IoCs

resource	yara_rule
sample	family_irata4

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

فیلم سکس لانا رودز.apk

.apk 2.1MB

فیلم سکس لانا رودز.apk

SHA256 36aa27fae24b4db50c7c28dbe114616403a327183586590b8c4549fa0493c452
MD5 0967adee386ebd6e7118aca22d941ba3
SHA1 74677711d4ba70d8bfe6aaa5afe98fbdb45a59eb
SHA512 ab1b0c68fcf862a3acaf605c73bd2da0efec48fc9373f865e503a3fd9cf9b21ad084738f7bd514d58fb659b35973798f75d77bcc3f9dbe20f80f921fd58df982
SSDEEP 49152:yCRoTNCE1I/GNPXawqHHsIyQMMntxy3Dh7qriNbMzkBgUqKb:Jq91WGBawYHByXMtuXgobqKb
MD5 SHA1 SHA512 SSDEEP

android

Irata payload

com.lana.fapp

co.ronash.pushe.service.GcmService

com.google.android.c2dm.intent.RECEIVE

co.ronash.pushe.service.FallbackGcmTaskRunner

co.ronash.pushe.ACTION_TASK_READY

co.ronash.pushe.task.scheduler.gcm.GcmTaskRunner

com.google.android.gms.gcm.ACTION_TASK_READY

co.ronash.pushe.service.IntentTaskRunner

co.ronash.pushe.service.InstanceIDService

com.google.android.gms.iid.InstanceID

co.ronash.pushe.service.ScreenStateService

co.ronash.pushe.service.ScreenStateService

com.evernote.android.job.v21.PlatformJobService

com.evernote.android.job.v14.PlatformAlarmService

com.evernote.android.job.gcm.PlatformGcmService

com.google.android.gms.gcm.ACTION_TASK_READY

co.ronash.pushe.service.PusheActivityService

co.ronash.pushe.task.tasks.NetworkConnect

co.ronash.pushe.receiver.PusheGcmReceiver

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

anywheresoftware.b4a.objects.FirebaseNotificationsService

com.google.firebase.MESSAGING_EVENT

.firebasemessaging

.intt

.pushejsonservice

.starter

anywheresoftware.b4a.samples.httputils2.httputils2service

co.ronash.pushe.receiver.UpdateReceiver

android.intent.action.PACKAGE_REPLACED

com.google.android.gms.gcm.GcmReceiver

com.google.android.c2dm.intent.RECEIVE com.google.android.c2dm.intent.REGISTRATION

co.ronash.pushe.receiver.FallbackGcmNetworkManagerReceiver

co.ronash.pushe.CHECK_TASKS

co.ronash.pushe.receiver.BootAndScreenReceiver

android.intent.action.BOOT_COMPLETED

co.ronash.pushe.receiver.ConnectivityReceiver

android.net.conn.CONNECTIVITY_CHANGE

co.ronash.pushe.receiver.AddReceiver

com.evernote.android.job.ADD_JOB_CREATOR

co.ronash.pushe.receiver.AppChangeReceiver

android.intent.action.PACKAGE_INSTALL android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_FULLY_REMOVED

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.v14.RUN_JOB net.vrallev.android.job.v14.RUN_JOB

com.evernote.android.job.JobBootReceiver

android.intent.action.BOOT_COMPLETED

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE com.google.android.c2dm.intent.REGISTRATION

com.google.firebase.iid.FirebaseInstanceIdInternalReceiver

.firebasemessaging$firebasemessaging_BR

.intt$intt_BR

android.intent.action.BOOT_COMPLETED

.pushejsonservice$pushejsonservice_BR

com.google.android.c2dm.intent.RECEIVE com.google.android.c2dm.intent.REGISTRATION

.starter$starter_BR

anywheresoftware.b4a.samples.httputils2.httputils2service$httputils2service_BR

Android Permissions

فیلم سکس لانا رودز.apk

Permissions

com.lana.fapp.permission.C2D_MESSAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.READ_PHONE_STATE

com.google.android.c2dm.permission.RECEIVE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

com.lana.fapp.permission.C2D_MESSAGE

com.lana.fapp.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.INSTALL_PACKAGES

android.permission.READ_EXTERNAL_STORAGE