Overview
overview
10Static
static
10META-INF/c...binary
debian-12-armhf
1firmware-u...bl.img
debian-9-armhf
1firmware-u...op.img
debian-12-armhf
1firmware-u...ig.img
debian-9-armhf
1firmware-u...cp.img
ubuntu-18.04-amd64
firmware-u...cp.img
debian-9-armhf
firmware-u...cp.img
debian-9-mips
firmware-u...cp.img
debian-9-mipsel
firmware-u...fg.img
ubuntu-18.04-amd64
firmware-u...fg.img
debian-9-armhf
firmware-u...fg.img
debian-9-mips
firmware-u...fg.img
debian-9-mipsel
firmware-u...er.img
ubuntu-18.04-amd64
firmware-u...er.img
debian-9-armhf
firmware-u...er.img
debian-9-mips
firmware-u...er.img
debian-9-mipsel
firmware-u...yp.img
ubuntu-18.04-amd64
firmware-u...yp.img
debian-9-armhf
firmware-u...yp.img
debian-9-mips
firmware-u...yp.img
debian-9-mipsel
firmware-u...fv.img
debian-12-armhf
1firmware-u...er.img
ubuntu-18.04-amd64
firmware-u...er.img
debian-9-armhf
firmware-u...er.img
debian-9-mips
firmware-u...er.img
debian-9-mipsel
firmware-u...em.ps1
windows7-x64
3firmware-u...em.ps1
windows10-2004-x64
3firmware-u...ti.img
debian-12-armhf
firmware-u...fw.img
ubuntu-18.04-amd64
firmware-u...fw.img
debian-9-armhf
firmware-u...fw.img
debian-9-mips
firmware-u...fw.img
debian-9-mipsel
Behavioral task
behavioral1
Sample
META-INF/com/google/android/update-binary
Resource
debian12-armhf-20240221-en
Behavioral task
behavioral2
Sample
firmware-update/abl.img
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
firmware-update/aop.img
Resource
debian12-armhf-20240221-en
Behavioral task
behavioral4
Sample
firmware-update/aop_config.img
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral5
Sample
firmware-update/cpucp.img
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral6
Sample
firmware-update/cpucp.img
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral7
Sample
firmware-update/cpucp.img
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral8
Sample
firmware-update/cpucp.img
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral9
Sample
firmware-update/devcfg.img
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral10
Sample
firmware-update/devcfg.img
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral11
Sample
firmware-update/devcfg.img
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral12
Sample
firmware-update/devcfg.img
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral13
Sample
firmware-update/featenabler.img
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral14
Sample
firmware-update/featenabler.img
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral15
Sample
firmware-update/featenabler.img
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral16
Sample
firmware-update/featenabler.img
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral17
Sample
firmware-update/hyp.img
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral18
Sample
firmware-update/hyp.img
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral19
Sample
firmware-update/hyp.img
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral20
Sample
firmware-update/hyp.img
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral21
Sample
firmware-update/imagefv.img
Resource
debian12-armhf-20240418-en
Behavioral task
behavioral22
Sample
firmware-update/keymaster.img
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral23
Sample
firmware-update/keymaster.img
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral24
Sample
firmware-update/keymaster.img
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral25
Sample
firmware-update/keymaster.img
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral26
Sample
firmware-update/modem.ps1
Resource
win7-20240903-en
Behavioral task
behavioral27
Sample
firmware-update/modem.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral28
Sample
firmware-update/multiimgqti.img
Resource
debian12-armhf-20240221-en
Behavioral task
behavioral29
Sample
firmware-update/qupfw.img
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral30
Sample
firmware-update/qupfw.img
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral31
Sample
firmware-update/qupfw.img
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral32
Sample
firmware-update/qupfw.img
Resource
debian9-mipsel-20240226-en
General
-
Target
fw_ishtar_miui_ISHTAR_OS1.0.15.0.UMACNXM_adc943f023_14.0.zip
-
Size
167.4MB
-
MD5
95d007139412754b609aa6715f2a2efb
-
SHA1
7445fe18307c9efeebbaaa83543d217d81bc9f96
-
SHA256
bfd5a9f7a8b34864daa6e8f5fc3fcdbd38f3cf835717cc573390481bb218da21
-
SHA512
c4e95fd8dc0330af46f842bdb16592387e6d49323ef4c9879c478add3b5beebb5da75c56607b235baf853fcbf00c5c499bee2d260031c9c2236644e87a3ecbd9
-
SSDEEP
3145728:FBwdQe8We6yfBYQFIhxXZmK7DaN/NJiZbjfFUQinDoD6kj0pYO8RHD3AwIAUf9Lb:bM4x6RzxTyJ2bjdiDI6kaYzHD3AwIAQl
Malware Config
Signatures
-
Irata family
-
Irata payload 1 IoCs
resource yara_rule static1/unpack001/firmware-update/modem.img family_irata4
Files
-
fw_ishtar_miui_ISHTAR_OS1.0.15.0.UMACNXM_adc943f023_14.0.zip.zip
Password: infected
-
META-INF/com/google/android/update-binary.elf linux arm
-
META-INF/com/google/android/updater-script
-
firmware-update/abl.img.elf linux arm
-
firmware-update/aop.img.elf linux arm
-
firmware-update/aop_config.img.elf linux arm
-
firmware-update/bluetooth.img
-
firmware-update/cpucp.img.elf linux riscv
-
firmware-update/devcfg.img.elf linux aarch64
-
firmware-update/dsp.img
-
firmware-update/featenabler.img.elf linux aarch64
-
firmware-update/hyp.img.elf linux aarch64
-
firmware-update/imagefv.img.elf linux arm
-
firmware-update/keymaster.img.elf linux aarch64
-
firmware-update/modem.img.ps1
-
firmware-update/multiimgqti.img.elf linux arm
-
firmware-update/qupfw.img.elf linux
-
firmware-update/shrm.img.elf linux riscv
-
firmware-update/tz.img.elf linux aarch64
-
firmware-update/uefi.img.elf linux arm
-
firmware-update/uefisecapp.img.elf linux aarch64
-
firmware-update/xbl.img.elf linux
-
firmware-update/xbl_config.img.elf linux
-
firmware-update/xbl_ramdump.img.elf linux aarch64