General

  • Target

    447c387fca23aea2b0b78f1cf9ee1c369078196fe3c3051bb99309268d4a9f79.bin

  • Size

    4.6MB

  • MD5

    304f779e21b4f70f4ce70ce4dd19dbe8

  • SHA1

    8b0d446fdaee497e107d35a2d04872dd9e6a9370

  • SHA256

    447c387fca23aea2b0b78f1cf9ee1c369078196fe3c3051bb99309268d4a9f79

  • SHA512

    1a4918bbc09fbca95a64c1395843e7c14d9d33a6d028edc84072c2c7b0ead44c47408de1257b5cf30d931c136245361764b54db346c009f0edd39d817c3aa641

  • SSDEEP

    98304:3B9TjJ+S1jSubIz4nKHqJD0ewD04D0lD0EGD0nAOD0aD05D0jl+7:x9ToqjSunWqJDeDxDYDsDCjDTDwDQlE

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 20 IoCs

Files

  • 447c387fca23aea2b0b78f1cf9ee1c369078196fe3c3051bb99309268d4a9f79.bin
    .apk android

    com.ftlasivrosiste.newicon

    .main


Android Permissions

447c387fca23aea2b0b78f1cf9ee1c369078196fe3c3051bb99309268d4a9f79.bin

Permissions

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.EXPAND_STATUS_BAR

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_ACCOUNTS

android.permission.REQUEST_DELETE_PACKAGES

oppo.permission.OPPO_COMPONENT_SAFE

oplus.permission.OPLUS_COMPONENT_SAFE

com.huawei.permission.external_app_settings.USE_COMPONENT

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_ERROR_WINDOW

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.CAMERA

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NOTIFICATION_POLICY

com.android.alarm.permission.SET_ALARM

android.permission.CHANGE_WIFI_STATE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.WRITE_CALL_LOG

android.permission.DISABLE_KEYGUARD

android.permission.RECEIVE_SMS

android.permission.WRITE_CONTACTS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS