General

  • Target
    12c907b2df3b31b2451a54f0cb649e17_JaffaCakes118
  • Size 7.8MB
  • Sample240504-pxvxtsha95
  • SHA256 f087475c1c687cd627b779c4b4583f8f86cd2f782444656b4814241a45814d30
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 3 IoCs

File Explorer

  • 12c907b2df3b31b2451a54f0cb649e17_JaffaCakes118
    .apk 7.8MB

12c907b2df3b31b2451a54f0cb649e17_JaffaCakes118

  • SHA256 f087475c1c687cd627b779c4b4583f8f86cd2f782444656b4814241a45814d30
  • MD5 SHA1 SHA512 SSDEEP
  • Irata payload

ir.ziba.gazabasibzamini

Android Permissions

12c907b2df3b31b2451a54f0cb649e17_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.c2dm.permission.RECEIVE

ir.ziba.gazabasibzamini.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

aandroid.permission.RECEIVE_BOOT_COMPLETED