irata | 0c41a6b7c502d2b21d3a42817339dcb64f4d00ce94941d7b951cef899bb9e68e[.]zip

General

Target

0c41a6b7c502d2b21d3a42817339dcb64f4d00ce94941d7b951cef899bb9e68e.zip
Size

4.8MB
MD5

bb28ec0e970bf08693c9cec750e1f1dd
SHA1

ba0bc6ca3a7f98237d8b9956724a6caad268589a
SHA256

82d342f5975d5ef678969b56d2d14bdea50db91f413b6ead79eb01796ce8ac64
SHA512

ac314d74e4f0dd291a99e68b8c2c5a9177064cceffdf87226a59af17970aece90395a6c9914edba0178195edd3f43d43fb3c800a20f905d0107aabb39f889b94
SSDEEP

98304:R9ZY9Acn8fVWUvdx8LPC9UAoCJLFMxjyURL8BOd3rkhLVbQn1PqpPxSIjw6oM:PW+fV5vdxKwUJCodyiYzhLuncxbjVoM

Score

10^/10

irata

Irata payload 1 IoCs

resource	yara_rule
static1/unpack001/0c41a6b7c502d2b21d3a42817339dcb64f4d00ce94941d7b951cef899bb9e68e.apk	family_irata4

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

0c41a6b7c502d2b21d3a42817339dcb64f4d00ce94941d7b951cef899bb9e68e.zip
.zip

Password: infected
0c41a6b7c502d2b21d3a42817339dcb64f4d00ce94941d7b951cef899bb9e68e.apk
.apk android

Password: infected

android.upgaraa.shah

.main

Activities

.main

android.intent.action.MAIN

Permissions

android.permission.RECEIVE_SMS
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

.k$k_BR

android.intent.action.BOOT_COMPLETED

.ss$ss_BR

android.intent.action.BOOT_COMPLETED

Services