General

  • Target

    version3.2.apk

  • Size

    3.6MB

  • MD5

    86b9be3dfc022d5b4725756c0cc5a02b

  • SHA1

    e899c25a2674f317b8327682553ecf6a9f436f94

  • SHA256

    4e609c2edadf166dbcb5c492e48d8169d5a36b09a3698a1ef27cd681e9f36f1b

  • SHA512

    ae5798ec1e65fa91adcd73d6f6dde480e1180725e1b6c60aa4c4d1e10e2aefd890988d5f93ea3fb49c689d67d024dbf95df0ca20f8547b70662b7a063b96aab1

  • SSDEEP

    98304:oK4MrIdrbxVoPs14H9xx6eDo6ddgwLOKTQdGd:oK4MrIdrbPoEwv0I7IGd

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 7 IoCs

Files

  • version3.2.apk
    .apk android

    com.googleFe.app

    .main


Android Permissions

version3.2.apk

Permissions

com.googleFe.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.googleFe.app.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.RECEIVE_SMS

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_CONTACTS