General

  • Target

    f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952.apk

  • Size

    4.1MB

  • MD5

    b96ae1bc59107140e911d3fb3561f9ab

  • SHA1

    f2c6e5d3466424559df6075e39c7698b6b033031

  • SHA256

    f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952

  • SHA512

    0be4d842b89590255be121ffe1438cac5a29eaac1abbe38931b53ea0a30b8076900ccd86938386f5a528d8e9398ced80e6470e0b344afefc3e87a866bf8a9f78

  • SSDEEP

    98304:LloAQeVrmihTeYpxkkAO00jSxe3uvJqaC+bZoiuBVdlqRl1Hvc7Xk:Llee1pTeG7jSxe3uTbZoiUdAR/Hvc70

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952.apk
    .apk android

    org.bax.project

    .main


Android Permissions

f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952.apk

Permissions

org.bax.project.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

org.bax.project.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS