General

  • Target

    Application.apk

  • Size

    3.1MB

  • MD5

    8522dcb54072b9072fbdb5831969468e

  • SHA1

    a76fe16d5d208f68039e472fccd69481bc6a3a05

  • SHA256

    ced34d0e01d14ff89b0fe1392ec7880046f39d3998a4266f075208d67cf043d3

  • SHA512

    ce4db7cba44968caf8501c80265256ec2e4f7919c7fbd8338bc54eed1619eca47063d7d2ac06a762be567649d0324be3941d2b93f71c999de06a7eebeaf92641

  • SSDEEP

    98304:j7J+xkkmXcxu6ZdRDRTLOJ+6mGpAVv/A/Kgng:j7J+xaMw6ZdRDRTizmKc/Azng

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • Application.apk
    .apk android

    org.bax.project

    .main


Android Permissions

Application.apk

Permissions

org.bax.project.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

org.bax.project.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS