General

  • Target

    05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0.apk

  • Size

    3.7MB

  • MD5

    2692680a7b8c65d4c840de1c8f40788a

  • SHA1

    588313f53c98ed371da721a815387d0b557b628d

  • SHA256

    05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0

  • SHA512

    d448d59f15fee5e916f50710aea129ca5d16b63f118a7c2c7f6d58fa105e38d80d729b55c1c1ff82362396cbd42ef487f76bb2cb2031a94d6e0b908f7c39e71f

  • SSDEEP

    98304:SZZTSHh5MkkFXIMt5A5qWfpLCrcy+sK3yAPax8vkt11uI6:SZZTSHMZYSW5XWJOyuu8K1y

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • 05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0.apk
    .apk android

    edward.org

    .main


Android Permissions

05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0.apk

Permissions

edward.org.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.VIBRATE

android.permission.READ_SMS

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

edward.org.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS