irata | appp[.]apk

General

Target

appp.apk
Size

4.4MB
MD5

33e4245b47968b28a760e6bcd4e5b08a
SHA1

4c131ac68de034a5d7d019925228d038794b4f87
SHA256

93d421b18af345591cb8b3fc3e995f5a9e78221deb0fa1e0474b2b942623d5b6
SHA512

806131af5b39066c3f230a6cb1fde20e178febac2d2483d97509ae161c119c4bda93666fb501690201a8ff34dff0c34158d4e238ae61e6f34e0f9010a680be12
SSDEEP

98304:+Wrk8fHunRhCNkweD/YZQXnqyK5tJhAnEF6joPpgKidfXZFFVtcUuxFKKo9:+WrZfOn3CSYEqyQJpLd+Xlvcs19

Score

10^/10

irata

Irata payload 1 IoCs

Processes:

resource	yara_rule
sample	family_irata4

Requests dangerous framework permissions 6 IoCs

Processes:

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_COARSE_LOCATION

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.ACCESS_FINE_LOCATION

com.google.android.providers.gsf.permission.READ_GSERVICES

com.sistemapegasus.pgsmobile.permission.MAPS_RECEIVE

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES