General

  • Target

    base.apk

  • Size

    2.8MB

  • MD5

    c700a9f32dd2d42392572a3d827fdf36

  • SHA1

    9728797ec1e93515da9c56215c30a6634f6521aa

  • SHA256

    a3a764e9c97606af14d4847f6816167345bbc2c0f7157e9e4dea1a3db7eee7f9

  • SHA512

    0ab84572d98ff8e3d0f04ffaf538352a89b35cf10f0f37167a84ad4053bf1411065423cdbebd5f5e09103556ba17d2cdc2bde9c650ea38b572fbc88bce0b4f74

  • SSDEEP

    49152:z/YuZrOPQV2VEtUbCdNHcsan4xy1OpVRsm9iqhDc37njsgCWhqTco+Tcdwy0OPy3:bZVNUboNHcsUwDRf9iqhYLnAPWvo6swT

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • base.apk
    .apk android

    com.mycarroll.app

    .main


Android Permissions

base.apk

Permissions

com.mycarroll.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.mycarroll.app.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS