General

  • Target

    Application.apk

  • Size

    2.8MB

  • MD5

    245004efafacaa64add5ce3aa63af05e

  • SHA1

    93737ec69a02ea252cacaf617670d98f44cdc652

  • SHA256

    b2becb9ae44822f4786e28fc66392763e3e04ee9fd2bb40a8268bcb3b61fa21e

  • SHA512

    edfa7e6ba9405134b53be2ee543fabc0a7ba09d4430a5811ab5b4a8f231881cf0ff29d3bb44ca31dda5c9ea7aa4f22fce18ec8776752cc539311842517022ddc

  • SSDEEP

    49152:g/ijZrOqMm7a+6OdNuFpIxlyoiNVAamJDW6iJXH1AKxbgIEr7IiWWpL+R:uPm7X6cNuFklyxNVqxiJNxbLojL+R

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • Application.apk
    .apk android

    com.mycarroll.app

    .main


Android Permissions

Application.apk

Permissions

com.mycarroll.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.mycarroll.app.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS