General

  • Target

    05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0.zip

  • Size

    3.5MB

  • MD5

    b83ee3ee7022f45e9699f4c8b47fb781

  • SHA1

    7b90356c5e631d42788dea5cf6a8a70b7c4dde2b

  • SHA256

    9abd0632bc6faa0a371bf65009d2ecf58e8386244140f08ec28498cbd1621549

  • SHA512

    a2de3a7b12d260757f66d30491a734d581e6bfe318723273672b3190e970f12839c4d1ad0e4565fe35f56a0c71247647ca71a9b125440e13ee3a2346122e2a6a

  • SSDEEP

    98304:RkOG+o3HRR1I+mdrGp9Vipjm3UUowWLf65T2lci2GHSMdtzE:nMPW+mxGXVipdvL02lci22SMdtI

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • 05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0.zip
    .zip

    Password: infected

  • 05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0.apk
    .apk android

    Password: infected

    edward.org

    .main