General

  • Target

    05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0.zip

  • Size

    3.5MB

  • MD5

    bb5564a5b4922998436e912ef9374ad0

  • SHA1

    7c0ad0f62813e22694c423bdcd94246daa899827

  • SHA256

    987b8f1c78468022606ca549d03a34b47fad33668ccaf2cf8ad5e9a2b334fc5e

  • SHA512

    660e60ce7798494ed6230fb64dcaf9751e7ef6b329e6ef5aa357dc7301c68fa076e6ac28baaa3cf51671d3f683b04ee5c7e79d4eee8f76bf85be03301fffa44b

  • SSDEEP

    98304:zD0f82Avcz+phZM7oQ570o4WXvV7M2EK9f2:zDI8jvcz+pXxwYfKJO

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • 05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0.zip
    .zip

    Password: infected

  • 05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0.apk
    .apk android

    Password: infected

    edward.org

    .main