Overview

overview

10

Static

static

10

49f8eb9779...aa.apk

android-9-x86

6

49f8eb9779...aa.apk

android-10-x64

6

49f8eb9779...aa.apk

android-11-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49f8eb9779b3096ca81339c7a6d3cad6a8fc20b3d91ffe103c19935d330ad0aa.apk

  • Size

    4.9MB

  • MD5

    4dbb47ed77c9ae9d22c0e7ff1661b910

  • SHA1

    b041daf9f96b284f51561d8532e76ba52687a50b

  • SHA256

    49f8eb9779b3096ca81339c7a6d3cad6a8fc20b3d91ffe103c19935d330ad0aa

  • SHA512

    738e849907ddd44ee0ea63094dbf1c7ae15c3c25ce69bed651b2cd52e29b6f2e5c3ac70cc1b1f0f9b5dfc7fad253d013101677f7221955884f77b7be497b5404

  • SSDEEP

    98304:ATVUJ7O9MqXehCX5XWkkuGjTf6EE1P61T:ATmJ70tbmiShiP61T

Score
10/10
irata

Malware Config

Signatures

  • Irata family
    irata
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • 49f8eb9779b3096ca81339c7a6d3cad6a8fc20b3d91ffe103c19935d330ad0aa.apk
    .apk android

    com.lyufo.play

    .main


Android Permissions

49f8eb9779b3096ca81339c7a6d3cad6a8fc20b3d91ffe103c19935d330ad0aa.apk

Permissions

com.lyufo.play.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_COARSE_UPDATES

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.lyufo.play.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.GET_TASKS