General

  • Target

    %D8%AF%D9%87%DA%A9.apk

  • Size

    2.7MB

  • MD5

    85238620a1edffd21f362b6e7602f3f8

  • SHA1

    07099757e9b8d7a9c3136d6dc1c89674e3ed2a24

  • SHA256

    1c03392d359aa6299b062468d464b5c0e19e42e309587458a45fff013fde5d2c

  • SHA512

    0e86bb5cb96b706ab8844ed9bccf675a85cdcad69d5e1e51bb5178cd6fceca312e559aee6af430ad3c4d0565959248b0b1d6abf04704539bbcc5e3ea8b480c14

  • SSDEEP

    49152:Y/FQ4KicxK35tLGW1JwNZ65ViTG83eg9I2IisvKDvdmeFhiPRidFNC:G2XiJvGm5VLS9q2+ijdmeqRAC

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • %D8%AF%D9%87%DA%A9.apk
    .apk android

    com.Mad.api

    .main


Android Permissions

%D8%AF%D9%87%DA%A9.apk

Permissions

com.Mad.api.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.Mad.api.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS