Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e974bfe5c6bacbe466b3bb8fef673b32fd7dc4a6cfbbe1e8260b5776af1ce145.zip

  • Size

    2.6MB

  • MD5

    eb3572f1225299fe5ac4d11904a99529

  • SHA1

    0569d06e26c4f907cc8930af19a7453e8fb64985

  • SHA256

    255d11fe92423cc1e8ec224aacff3922da927047ae86b7d6092a4a41c616b6b1

  • SHA512

    d9fbe76465783a2bbd96bd8740a2c2c0e1188a6be8e45b32ef5444802e4b6c86bf6215a69e017b3e21c0d6dc0ed202b379c9f5c5b47a4520414efdfda7000cfe

  • SSDEEP

    49152:vQaotIotHZq6l7Jablmf63RGnBaHtnRzb1c0uep01dz3h16lQKmeKKymRO:hotIzbL1v1cF73Wlf84O

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://rat-remote.online/data/2001077894/rat/7b96U435/contact.php?result=ok&action=upload&androidid=

https://rat-remote.online/data/2001077894/rat/7b96U435/requests.php

https://rat-remote.online/data/2001077894/rat/7b96U435/sms.php?result=ok&action=upload&androidid=

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • e974bfe5c6bacbe466b3bb8fef673b32fd7dc4a6cfbbe1e8260b5776af1ce145.zip
    .zip

    Password: infected

  • e974bfe5c6bacbe466b3bb8fef673b32fd7dc4a6cfbbe1e8260b5776af1ce145.apk
    .apk android

    Password: infected

    Mad1sal.com

    .main


We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.