General

  • Target

    30e32b40f5fbbc3e81150e35b2bb703832c557c742c80de15140a9272d03f715.apk

  • Size

    3.9MB

  • MD5

    233d1d9d464277a074d28a6bebab05bb

  • SHA1

    03c06c39e1a6eddd2abceef19764d1b8d6e2da49

  • SHA256

    30e32b40f5fbbc3e81150e35b2bb703832c557c742c80de15140a9272d03f715

  • SHA512

    108000ede1b3b7df777b4fa6925b7c5710fbf7d8ed8c1d95aa6ee0bd37ad72ec4f6345abaf21f79b2cd208ff3826249580a561e4a19e566e637ecf38a448b981

  • SSDEEP

    98304:4GZTSHh5MkkmXYHuPqSZFp7tzrNxNuUdD+nR2c8YW:4GZTSHMaIHuPqSxhz7diR2PYW

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • 30e32b40f5fbbc3e81150e35b2bb703832c557c742c80de15140a9272d03f715.apk
    .apk android

    org.bax.project

    .main


Android Permissions

30e32b40f5fbbc3e81150e35b2bb703832c557c742c80de15140a9272d03f715.apk

Permissions

org.bax.project.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

org.bax.project.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS