General

  • Target

    Instagram.apk

  • Size

    5.5MB

  • Sample

    230930-csn79she27

  • MD5

    aab5cb7f07c901de8a5c54d39f4977b4

  • SHA1

    626a0a20406063419a13488225c8392bd5b6943f

  • SHA256

    9f23df054570cf94a0fe1efe0fae1f6e7b2f66fdbd2700bb42c49c5e23214bbb

  • SHA512

    f08901614bae6d6580cf4ef640f0b329b996fba281ca1cafc2201728777fe38df1e8593e149b408453209a2fb479b1b0675288be707e6eac629291f10f278e35

  • SSDEEP

    98304:8qYZpcQb788aGg82Qr9pzbuV7zphCIJaL31fsT8UofrFqSxAPubXWmB692VL:BicQHNaf8/IXrJaD1fMr0XNB6OL

Score
10/10

Malware Config

Extracted

Family

airavat

C2

https://DATABASE URL

Targets

    • Target

      Instagram.apk

    • Size

      5.5MB

    • MD5

      aab5cb7f07c901de8a5c54d39f4977b4

    • SHA1

      626a0a20406063419a13488225c8392bd5b6943f

    • SHA256

      9f23df054570cf94a0fe1efe0fae1f6e7b2f66fdbd2700bb42c49c5e23214bbb

    • SHA512

      f08901614bae6d6580cf4ef640f0b329b996fba281ca1cafc2201728777fe38df1e8593e149b408453209a2fb479b1b0675288be707e6eac629291f10f278e35

    • SSDEEP

      98304:8qYZpcQb788aGg82Qr9pzbuV7zphCIJaL31fsT8UofrFqSxAPubXWmB692VL:BicQHNaf8/IXrJaD1fMr0XNB6OL

    Score
    1/10
    • Target

      dropbox.html

    • Size

      12KB

    • MD5

      168619ada3a8a151b5522c09757bc421

    • SHA1

      14c6942b61abf27c29b20cbe271848566d12bc3e

    • SHA256

      ae4a9b0f441f0271a3d807243ddc46cea4bf51c186a92d4791e582bfce71efed

    • SHA512

      0880fae85bc2f2e1167d96295e548ef341745d750c5dc2ede5d633e047a51c69b4c19215a031616372341a7745ce0a2d28caa273200728509dc5624acf314c87

    • SSDEEP

      192:dKEPSii2eZ052m052PGeCLNw7PSlcdDksHYHCJgwMWEdRXYi1PIzk:d3ni2ezyPo04cKs4t3W0f1PIzk

    Score
    1/10
    • Target

      facebook_desktop_homepage.html

    • Size

      17KB

    • MD5

      fe536a0453bc2f7e380f67df95b55de7

    • SHA1

      a875113278e148bb928a197a1bc4ab754167ec57

    • SHA256

      d7d3737cd0864c9353bc6f473dfc8726d4b620a062c66581208de8f62a42bd2a

    • SHA512

      0ada17f7382270c4d20e2f0ab76f7ad1e09929c52ce1e2a446dcfe6a3918f548ad9d7372d2d2a085a1de9cbfe43d5caa9a534fdb40441fb7f02917193350a4e6

    • SSDEEP

      192:TqugQjZ0OnToFY7/BLZRl6Sc8P1v5qZlZ+ZnyZNl6Ex:TqudZbT9lLE58P1Rqf4FyBx

    Score
    1/10
    • Target

      facebook_desktop_static.html

    • Size

      7KB

    • MD5

      b520bf77d3f091ab7c1584222e533f01

    • SHA1

      dc68118dbbc29e6eaf98ddcba79c93b891cc2158

    • SHA256

      bed9d3347753263b27e513fc57cd3366929b5ee5271542a120474ba8aa954fce

    • SHA512

      01d5a12b0e0824be2ecd14ddc79f3de98328881cfd4d109e86c23018cc6ce03b06e1c32633ecff23f4204c600697cbc1c38e14ab7957a5bcf6aea1ae8c3114f4

    • SSDEEP

      96:0Y8NSXgE2bw+vt9HcXD7tVgE2bo/b1hXgE2bohO/+XF:0tAg9bw+vrHwD7tVg9boDng9bonV

    Score
    1/10
    • Target

      facebook_mobile.html

    • Size

      11KB

    • MD5

      75fcdb1e09e6a7697713fb6f83021cb0

    • SHA1

      b12cbca3b52ca3eb63abf52086432b1a0965c47e

    • SHA256

      e4b692454ffde0ab619659bfdd1a5b26994d83dbaf30fd3f22d820d51a87f5cb

    • SHA512

      6875b5f10ac074eb4f8fa57c05c6b255f64cfd5df65b967980ccbe7a263c46e3239ff0fe72341cb62b6370ef8c146bd01001e710dd02b0a8e06a6485c02c9d95

    • SSDEEP

      192:u5zREOR0Hlj5/CwyzyLnEhO5k7efrjGpEF9/w7jsSQ:uNREOqlN5nVa7jpEF9/1z

    Score
    1/10
    • Target

      facebook_mobile_fake_security.html

    • Size

      10KB

    • MD5

      6083f60fc451ea0354b00e1058ac15df

    • SHA1

      9e3063172228e6219f1482c9ccda57d02d0bdf4d

    • SHA256

      5da1d3ddde573bfbec81e0279e86a77df70a76ba10389d31fbba2d470372158e

    • SHA512

      61d111b70338e4a3b8b26c86842843cf264e8e4d008978596867f61c485604015443bcec03ecd862b17a4d8ea9ab0917af3a03ffe8f943ed54183eb0c005eb38

    • SSDEEP

      192:6MzREOR0Hlj5/Cwyzygk7efrjGl7F92L+sxQ:6QREOqlN77jl7F9Mq

    Score
    1/10
    • Target

      garena_free_fire.html

    • Size

      5KB

    • MD5

      9a849b2f53ecfb0555f094204d30f579

    • SHA1

      54d37bca91b0bffbd10592752d90e29397dda084

    • SHA256

      0cb9ef94582dbe566091d89b6903237d5cea31f48e494cfcf530c33de77dd72c

    • SHA512

      d47643ac0bde9b7f4cec62687f79b2938703e0bec9f5cecd67fce16d04c44755409406d588544725c4c697b0727372731809ffd2549f1026218d61e958ca3b75

    • SSDEEP

      96:ofdvPjc2XXIlXLvG9IgLth3Rbla+BJ3xb2HoG1lKAPHiuwSOO:ofdHjc2Hqq2YBxbVGZiu8O

    Score
    1/10
    • Target

      github.html

    • Size

      5KB

    • MD5

      f9cd3ffd48779a7b315cf0c9fe53adf1

    • SHA1

      ce57b539ec46f8718763de8b5722dabe5f05898d

    • SHA256

      2265b27f4e54da46b429edfb5fe5d2f5a1af9482077a7ae48edca42545cca369

    • SHA512

      ff1493069d64742d66d7568d564df20502ee0b6d75ba9ea3ebf1734d81ce8ff6fe6764be304e791cbd4757cd86aa9cccc444e83d8b4f873ba2525f208cbf8e81

    • SSDEEP

      96:M0hLNKwvR2Rk+K9ZX7NIzIrZ18cmYwo9wwiww/whhwHro+kAPvlj6vFzL4:M0JNZzXh1rn3jZip/ehIrFP9eFzk

    Score
    1/10
    • Target

      instagram.html

    • Size

      11KB

    • MD5

      b14c3a18a600742ad0f56f809bf8e240

    • SHA1

      57043b5449e49184dd6566ad1566176f004d1a3c

    • SHA256

      1a2222182c54fc1627b803657eef8a7f5da98390af508b0035be3a3129204f27

    • SHA512

      d39482dce371cd945ea77d2ad49628bd59130efc8bb9c649db614356f26a0810208d0784cf10e1b69812d313f1b1955fd1e89a2ccb26659ea787ab4f9cb3fb5b

    • SSDEEP

      96:JUzNmNGcQ75tDzcic0JFBk+oTBW+WzRoIRcAKc1W7ZTitcSJMAinRtw/11URqdGF:GzNmNQ5Rr7BtTOZeZqRqdGX3F

    Score
    1/10
    • Target

      jquery.js

    • Size

      265KB

    • MD5

      6a07da9fae934baf3f749e876bbfdd96

    • SHA1

      46a436eba01c79acdb225757ed80bf54bad6416b

    • SHA256

      d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad

    • SHA512

      e525248b09a6fb4022244682892e67bbf64a3e875eb889db43b0a24ab4a75077b5d5d26943ca382750d4febc3883193f3be581a4660065b6fc7b5ec20c4a044b

    • SSDEEP

      6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3

    Score
    1/10
    • Target

      linkedin.html

    • Size

      18KB

    • MD5

      79122270d687e6b2da111de84a5da589

    • SHA1

      56a187033904ca9cd03883db351528f630f8a294

    • SHA256

      4ce23c8d552debb59e10f9cbba9120346122581555a689201a704d30756f1902

    • SHA512

      66be2860ea7c8b1642351268e4d1c8487c75bd440fcc0852dcfbdb4370951a62110c627b4f36b5c63f59d112b2ddb6ccdc4de82e5751fbbc316bd4611430e911

    • SSDEEP

      192:IWdDW+bGiTxw8dwT0m9tI4IvcIWIlf1OrxZz+ittekgwh4QX2bFoXMI8NfFbCSI:IIrSjhnHR7yStekgOXkFZHnfI

    Score
    1/10
    • Target

      messenger.html

    • Size

      4KB

    • MD5

      cbd21a83eac199abfdf5f81f0e2fb02f

    • SHA1

      a246bb2b57b982bb69608eceff0d6e7029a1a1a9

    • SHA256

      94b04c59110c8e9576b95e5b01886bb9242df726bf6053453b150d8f7954c259

    • SHA512

      0f5da324d1f51794085e31b5c377297766dc1d2e315bddb8d731a6424c56cf236f2b909881b05bea53b3e46bf9136407b6aea5910cd68a1e66f04521a45208f3

    • SSDEEP

      48:tLY/qso1j7aYIMzLF3wY0+wVHNKJfjcS0efCSP9yF7P9BOdABr2eGGCr:mCXIQ/WWjXfC0absOC/

    Score
    1/10
    • Target

      microsoft.html

    • Size

      4KB

    • MD5

      e7d7da7348886daf9848f9a903f3cdf5

    • SHA1

      75f7a459cd2695a2c749af7c2cfe06648d30ffb2

    • SHA256

      437682d7aed87913869e30288646cd56f35e10da37afd12612ad1322c3b4ad17

    • SHA512

      cb46fbc812f49f44974da6a243c9c70b8908a5d1df6b3b17c660d01450e9aa488ae60834c3bc288a805e76a2531256e9cde57b1dd6c80dfbf1913acadf0402db

    • SSDEEP

      96:DtlHily5pXyKAWlT4vrxhEg3ctxBBJhyDXqfGGDXojF7:vHilyzXyK1Urxt3mxRh43jd

    Score
    1/10
    • Target

      netflix.html

    • Size

      24KB

    • MD5

      d9e67756e4a151a36014a507492e818f

    • SHA1

      b493799f682b281ff2502727e5a453100e55a0d9

    • SHA256

      cb1a061a6b48bbd4d5ec35cea27df807195ce217a148ab8cc1584f4c38854bd3

    • SHA512

      0e719807ecb716ff0cafc5529a6ca6b4a26cdb0a73e20d9e93190551234a5f69381cc57784566982821b0830c240dff93f65f8be7cf3d66a616c25ef88b539a9

    • SSDEEP

      384:ECQ+vcD1M5NCVUycqdSe4+PZCC0o1K9cFka:YM5NZycqdSe4+PZEWFka

    Score
    1/10
    • Target

      paypal.html

    • Size

      3KB

    • MD5

      6e2f15c66234a7e12e150123fbd69ab6

    • SHA1

      c45192d8b147e4c604bdae79ad3e4a8c4a4227af

    • SHA256

      4121306c2b9cd81ff08ee1078b0359a9dc8baca6522b9fd806d8f805d9ee564c

    • SHA512

      f47383d2e21b440091cb99dc1e3172e80dc171a51b92ecccd24004a7783444236d975e4eeecea27700b3bdf0eae6bc484f60ebb01c039878cc1e1ba545b7deba

    Score
    1/10
    • Target

      protonmail.html

    • Size

      12KB

    • MD5

      6dd0fbacecfee2c056d52d33d1890bf3

    • SHA1

      fd5507643a10c109c4c7b2903f3b75b391005380

    • SHA256

      ca7a166518d45869c30e929c970a01913b6ea881b7b74c9a979b36c780e546de

    • SHA512

      8c4ed897693eb64f88fab8cfbe8d04369b8495903a700c4d745d52a10afb2f4c3d5af806aabda93f20a42aa914eb073baab7ba8fef944e39a5480fb20d9e4da4

    • SSDEEP

      192:oFa2FL7Nl27/nNHwW7nviC0/nrfOxQZ0Km8x+4Mzf7VrjO:oFag7NA7zN0LOxQZ0Km8x+v8

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks