com.google.firebase.auth.internal.GenericIdpActivity
android.intent.action.VIEW
com.google.firebase.auth.internal.RecaptchaActivity
android.intent.action.VIEW
.main
android.intent.action.MAIN
.main
android.intent.action.MAIN
General
-
Target
app.apk
-
Size
2.9MB
-
MD5
2f9e86a38a6fffb11558d6574f0c34d6
-
SHA1
3a8dee7c2126324d207495d11088030a887fffde
-
SHA256
5175de8c62639156f351a42d563492440884885d38f895475f4f060597e5f6c6
-
SHA512
3646f04d461512d51db50b1cd81e67f34c6c5e21b1d3f8354be5efffb8c32e050f5427ce7305c031d1c2cffdfd95ce47c7079d981ddd746f4e27544fb951f616
-
SSDEEP
49152:EgWFAXE+483B4UYjZsj51LUg4+/UUwXVF6G8hL8P790ewYJWIzLDhMOJfjMtM9xq:EgXEW3B45ZsjzD/UUcVPO6J0eHsIzLDi
Score
10/10
Malware Config
Signatures
-
Irata family
-
Irata payload 1 IoCs
-
Requests dangerous framework permissions 4 IoCs
Files
-
app.apk
Com.ukjent.app
.main
Android Permissions
app.apk
Permissions
Com.ukjent.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.INTERNET
android.permission.READ_SMS
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_NETWORK_STATE
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
Com.ukjent.app.permission.C2D_MESSAGE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.RECEIVE_SMS
android.permission.CHANGE_NETWORK_STATE
android.permission.SEND_SMS
android.permission.READ_CONTACTS