General

  • Target

    app.apk

  • Size

    2.8MB

  • MD5

    b5b268849ce14d6e2d5da4239baa0730

  • SHA1

    12e431546e9c0cf8c97816cece092c1ea2b1784e

  • SHA256

    d0b493c7dc8060b9cb42dffbdcf07d5d56c422670f07b440c13a6d4f5525dca8

  • SHA512

    aa35c3eb5d019ffa73cbc78bfe3e717e44d5b4048f765ce0e6527839e03e45e7ea955743680e0e3e9291a6eff765980b375b58f0ced786977bb010b7e3aa50c1

  • SSDEEP

    49152:xiQOfK6yHrJPzD5fjToKfYD2E+8YbKvn8E2MtiML8qUojC3exHunNReYQrH:xxLJLJbD57ToKAD3Ae/12xMTUojCnNR8

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • app.apk
    .apk android

    Com.ukjent.app

    .main


Android Permissions

app.apk

Permissions

Com.ukjent.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

Com.ukjent.app.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS