General

  • Target

    base.apk

  • Size

    2.7MB

  • MD5

    db7e22b90721e55e9a3f05bd36904488

  • SHA1

    40177ab1a4d330cc82f08301ae4253fe973b776f

  • SHA256

    7b01b843af5381801d488162dd504e0b95ad387867cb0daef4dbc7dec96b3ccf

  • SHA512

    d92534ca28d71dbb7190e07345cb25cd461352e9baf8d7d049f372c0a0fbc6576a44b3b66929eac0f640a4b06cf5ced8f740419bf32cf7f914e48b591cace4ec

  • SSDEEP

    49152:a/24gOIbEPSShDkkQOjEahfwvlmKuSscn2SbqLjFFko79sCUXF3X2xTcxIKpU:w322SaDkJOjFyvlmKFsMbEFFphAXF3X2

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • base.apk
    .apk .html android polyglot

    com.Mad.api

    .main


Android Permissions

base.apk

Permissions

com.Mad.api.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.Mad.api.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE