General

  • Target

    base.apk

  • Size

    2.8MB

  • MD5

    312f62cb1d160b5fa58c811a0cc1d99b

  • SHA1

    5aa873bad2b9be6b350db47e67ef5dbf3379dd49

  • SHA256

    4e6dcfd43f37fde88b39f1f97c5079fcdce94cc75a5612f389454fb5fdd9868a

  • SHA512

    f4f4c3f1c6c509f734e5588c519cd9ce680acadc62d90038431a06106158759ca9d1be1a7606654ac54e6c11f2643ede468a223b83bf7ebfe9fe80d7336003f8

  • SSDEEP

    49152:vKu2GSlhq+gpveu9LJOwtQMCY9Guk/Bkoa3lNf0viCsjRCOQEbTbbDj:SGSl0veuDCMk/GoajySjRCyLj

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • base.apk
    .apk android

    x.akuma.x

    .main


Android Permissions

base.apk

Permissions

x.akuma.x.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.READ_CONTACTS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

x.akuma.x.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE