General

  • Target

    app.apk

  • Size

    2.8MB

  • MD5

    19e683f7c8ce28f3fc53db28fb85bbe9

  • SHA1

    027902f8a3d62896ef80ad2eaf4c84c3317b100a

  • SHA256

    670ddd9805ac2ee5a58c3e4a56bdf6cf665da28ee3d847b149da8c90806111fe

  • SHA512

    007e280b382bb55f3cc8490e28edec240af1a4191366ab760ea541aa69f8b723af801bb032bce6daf8c5d03af24dd478225b2f30542b91a4a7ac82ea48a0c435

  • SSDEEP

    49152:p/16xEtDTSfXzwY/48Ym7HS7giLkJxfhvKbVgtZViuPgnNNLTfUhuK:x16CxOfXz9/fYMHGkbhvKbVgtZVqZT8D

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • app.apk
    .apk android

    Mad.api

    .main


Android Permissions

app.apk

Permissions

Mad.api.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

Mad.api.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS