General

  • Target

    Instagram.apk

  • Size

    5.5MB

  • MD5

    aab5cb7f07c901de8a5c54d39f4977b4

  • SHA1

    626a0a20406063419a13488225c8392bd5b6943f

  • SHA256

    9f23df054570cf94a0fe1efe0fae1f6e7b2f66fdbd2700bb42c49c5e23214bbb

  • SHA512

    f08901614bae6d6580cf4ef640f0b329b996fba281ca1cafc2201728777fe38df1e8593e149b408453209a2fb479b1b0675288be707e6eac629291f10f278e35

  • SSDEEP

    98304:8qYZpcQb788aGg82Qr9pzbuV7zphCIJaL31fsT8UofrFqSxAPubXWmB692VL:BicQHNaf8/IXrJaD1fMr0XNB6OL

Score
10/10

Malware Config

Extracted

Family

airavat

C2

https://DATABASE URL

Signatures

  • Airavat family
  • Requests dangerous framework permissions 11 IoCs

Files

  • Instagram.apk
    .apk android

    sigma.male

    .MainActivity


  • dropbox.html
    .html
  • dropbox1.png
    .png
  • dropbox2.PNG
    .png
  • dropbox3.png
    .png
  • dropbox4.svg
  • dropbox5.svg
  • dropbox6.svg
  • facebook1.png
    .png
  • facebook2.png
    .png
  • facebook3.png
    .png
  • facebook4.png
    .png
  • facebook5.png
    .png
  • facebook_desktop_homepage.html
  • facebook_desktop_static.html
  • facebook_mobile.html
  • facebook_mobile_fake_security.html
    .html
  • free_fire1.webp
  • free_fire2.png
    .png
  • free_fire3.png
    .png
  • garena_free_fire.html
    .html
  • github.html
  • github1.png
    .png
  • instagram.html
    .html
  • instagram1.png
    .png
  • instagram2.png
    .png
  • jquery.js
    .js
  • linkedin.html
    .html
  • linkedin1.png
    .png
  • linkedin2.png
    .png
  • linkedin3.png
    .png
  • messenger.html
    .html
  • messenger1.png
    .png
  • microsoft.html
    .js
  • microsoft1.png
    .png
  • microsoft2.jpg
    .jpg
  • microsoft3.png
    .png
  • netflix.html
    .html
  • netflix1.png
    .png
  • netflix2.jpg
    .jpg
  • paypal.html
    .html
  • paypal1.svg
  • paypal2.png
    .png
  • protonmail.html
  • protonmail1.png
    .png
  • protonmail2.png
    .png
  • protonmail3.png
    .png
  • protonmail4.png
    .png
  • pubg.html
    .html .js
  • pubg1.jpg
    .jpg
  • pubg2.png
    .png
  • sample.html
    .html
  • sample1.png
    .png
  • script.js
    .js
  • snapchat.html
  • snapchat1.png
    .png
  • snapchat2.png
    .png
  • test.png
  • tumblir1.png
    .png
  • tumblir2.png
    .png
  • tumblr.html
    .html
  • twitter1.png
    .png
  • twitter_desktop.html
  • twitter_mobile.html
    .html
  • wordpress.html
  • wordpress1.png
    .png
  • wordpress2.png
    .png
  • yahoo.html
    .html
  • yahoo1.png
    .png
  • yahoo2.png
    .png

Android Permissions

Instagram.apk

Permissions

android.permission.INTERNET

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.FOREGROUND_SERVICE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.BROADCAST_SMS

android.permission.SEND_SMS_NO_CONFIRMATION

android.permission.CALL_PHONE

android.permission.WRITE_CALL_LOG

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.SET_WALLPAPER