General

  • Target
    jaffacakes118_d12c1d7d939ac4c1e3a696b1854d17080ea4a4aaaedcb9e1142990d2ce3a4300.bin
  • Size 2.9MB
  • Sample260922-phtffseb54
  • SHA256 d12c1d7d939ac4c1e3a696b1854d17080ea4a4aaaedcb9e1142990d2ce3a4300
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: Irata

    Irata is an Iranian remote access trojan Android malware first seen in August 2022.

  • Irata payload 1 IoCs

File Explorer

  • jaffacakes118_d12c1d7d939ac4c1e3a696b1854d17080ea4a4aaaedcb9e1142990d2ce3a4300.bin
    .dex 2.9MB

jaffacakes118_d12c1d7d939ac4c1e3a696b1854d17080ea4a4aaaedcb9e1142990d2ce3a4300.bin

  • SHA256 d12c1d7d939ac4c1e3a696b1854d17080ea4a4aaaedcb9e1142990d2ce3a4300
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Irata payload