General

  • Target

    9cd96e4f52181be557169da2780b3600577aa3638d11fd7ceb9ac8016d70ce79.bin

  • Size

    2.7MB

  • MD5

    facd0ac8cf903c71acff21a595474c09

  • SHA1

    1063665ff1307ec25604bff1d6aef2dbc95bf09c

  • SHA256

    9cd96e4f52181be557169da2780b3600577aa3638d11fd7ceb9ac8016d70ce79

  • SHA512

    b99b98b3a778476e434740a354dbef643c099b652d81c14dc62c3175119399250202ea5fdf8373be1bf719745299185172572a3662c86b8cbc53bf6d38addf1e

  • SSDEEP

    49152:a12xwpXSFZlfn2nt/j3SlTaq39pogcG4iJuw3BLPvQRhXOoqlGottER6VTfxx:82x7FZlfnqCBaafogP4iJddHQ7Mlhf7n

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • 9cd96e4f52181be557169da2780b3600577aa3638d11fd7ceb9ac8016d70ce79.bin
    .apk android

    coylast.tback.newcamilo

    .main


Android Permissions

9cd96e4f52181be557169da2780b3600577aa3638d11fd7ceb9ac8016d70ce79.bin

Permissions

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.BIND_WALLPAPER

android.permission.SET_WALLPAPER

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_PACKAGE_SIZE

android.permission.USE_FINGERPRINT

android.permission.REORDER_TASKS

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.EXPAND_STATUS_BAR

android.permission.BLUETOOTH_ADMIN

android.permission.NFC

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.SET_TIME_ZONE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.READ_SYNC_SETTINGS