General

  • Target

    app.apk

  • Size

    2.8MB

  • MD5

    3b101fa1cdecde692d532e283cde0965

  • SHA1

    d5bddb3d1d78a1ccaf08008144b40380a76e4792

  • SHA256

    76a8d06ffe1be684e5be20aca8b45e6bdd0399b7870ff6ed17e67284a762560c

  • SHA512

    e37586d79e676ff6aa613b216d80ad3fdcc73c5b74780d818b1bf2f79c06c706d5277571f151809a16ad8ee032963995f31132a210b0da87736d99ac79fced3d

  • SSDEEP

    49152:HU/q6xEtzSF8vds66oL6WCJnAokqjcOjNO5Y/3CHLQYB4P9X3R5oHYWF:HCq6CBtvG6D6WoOORB/3sLQzFXvS

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • app.apk
    .apk android

    Mad.api

    .main


Android Permissions

app.apk

Permissions

Mad.api.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

Mad.api.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS