General

  • Target

    Application.apk

  • Size

    2.8MB

  • MD5

    d8e3b261db327682c9c0eb38d9fb7ab2

  • SHA1

    a0885a77dc4cd30d40fc76889353bdbccfa095d5

  • SHA256

    032f79ec96c2f6dc76216ef42e50fc0470298e4a3bc73c84de4e73f866cfae65

  • SHA512

    a373e66906b3ab26a0cdf297b2a5d2885498c4534a68783b46e51f2e5ba519b61d1fa475e0c8ea212e688ea5e65c5773443e9a41c78f4a21b0be4eeced3c1436

  • SSDEEP

    49152:pQkkpeXGvHxR8X9CPnjEOQRWX4QT9v9PTiN3lTjPqW290wNnEO+hGK8Pjt9nw9E7:6kkcX638injeRWIQB9PuT/k0YRWt8Bh7

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • Application.apk
    .apk android

    edward.org

    .main


Android Permissions

Application.apk

Permissions

edward.org.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.VIBRATE

android.permission.READ_SMS

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

edward.org.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS