General

  • Target

    0ed8987b07a4d017db6a475ff327eb6d9c6004ec5155a72635d3a4202a28839a

  • Size

    2.8MB

  • MD5

    6b75d656c4bc46679e85fe0b2515951b

  • SHA1

    d795ea1715152ce0381476725766ec76db4974c7

  • SHA256

    0ed8987b07a4d017db6a475ff327eb6d9c6004ec5155a72635d3a4202a28839a

  • SHA512

    e98e942ba8214891c4afbeb626c5fd3fcce22ce7b14570d249a0e34487f7173a6a44437f1e8d45b39abed43fab36200f78d8de5f417b348c91cc2b87b71d8b4c

  • SSDEEP

    49152:Q/odkkEeXP9acJSg2a41GOh7/ZS6yu3pXJY9cLyy0F8S/0KkuB/W8FIet9H9Ck8E:+0kkFXFZEg2/l7xlJY+Py8SDYeH0DI/

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • 0ed8987b07a4d017db6a475ff327eb6d9c6004ec5155a72635d3a4202a28839a
    .apk android

    edward.org

    .main


Android Permissions

0ed8987b07a4d017db6a475ff327eb6d9c6004ec5155a72635d3a4202a28839a

Permissions

edward.org.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.VIBRATE

android.permission.READ_SMS

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

edward.org.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS