Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e974bfe5c6bacbe466b3bb8fef673b32fd7dc4a6cfbbe1e8260b5776af1ce145.zip

  • Size

    2.6MB

  • MD5

    eb3572f1225299fe5ac4d11904a99529

  • SHA1

    0569d06e26c4f907cc8930af19a7453e8fb64985

  • SHA256

    255d11fe92423cc1e8ec224aacff3922da927047ae86b7d6092a4a41c616b6b1

  • SHA512

    d9fbe76465783a2bbd96bd8740a2c2c0e1188a6be8e45b32ef5444802e4b6c86bf6215a69e017b3e21c0d6dc0ed202b379c9f5c5b47a4520414efdfda7000cfe

  • SSDEEP

    49152:vQaotIotHZq6l7Jablmf63RGnBaHtnRzb1c0uep01dz3h16lQKmeKKymRO:hotIzbL1v1cF73Wlf84O

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://rat-remote.online/data/2001077894/rat/7b96U435/contact.php?result=ok&action=upload&androidid=

https://rat-remote.online/data/2001077894/rat/7b96U435/requests.php

https://rat-remote.online/data/2001077894/rat/7b96U435/sms.php?result=ok&action=upload&androidid=

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • e974bfe5c6bacbe466b3bb8fef673b32fd7dc4a6cfbbe1e8260b5776af1ce145.zip
    .zip

    Password: infected

  • e974bfe5c6bacbe466b3bb8fef673b32fd7dc4a6cfbbe1e8260b5776af1ce145.apk
    .apk android

    Password: infected

    Mad1sal.com

    .main