General

  • Target

    834702f8a9d0b943e9aa0371011171176818bbca1b49f1e6e1679fd6b604447c.apk

  • Size

    3.8MB

  • MD5

    f5adc75f5964b035ebeedba63038ae74

  • SHA1

    be91b6337f31ddac31e742710011e8d9a0ef7ed8

  • SHA256

    834702f8a9d0b943e9aa0371011171176818bbca1b49f1e6e1679fd6b604447c

  • SHA512

    d49ac544ddb98ad63dfa3d6da085b0c39aa4b8d6ccd4a402ee0dab64c8b3bf6751a5e70b8516eaf631fcacebf861604729bbae788b22cd8a26c9e1047e8160cc

  • SSDEEP

    98304:4TqYjwZAkkmX/WlkslMPHV9F7F5KwnFIbD6e4ku/Uow8oIms2z:4TqYjfavW+sUh6wnFI36Vku17ms2z

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • 834702f8a9d0b943e9aa0371011171176818bbca1b49f1e6e1679fd6b604447c.apk
    .apk android

    org.bax.project

    .main


Android Permissions

834702f8a9d0b943e9aa0371011171176818bbca1b49f1e6e1679fd6b604447c.apk

Permissions

org.bax.project.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

org.bax.project.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS