airavat | AIRAVAT-main[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

AIRAVAT-main.zip
Size

13.6MB
MD5

2dd2604469f2eda9d83845eaff867f55
SHA1

df9c002eae216fd79345496af595820825603243
SHA256

abfcb9395969bb12745bf38dc7553c6ec813f356fc4a820008bbaaf85c3c1470
SHA512

59dbf63c88ab01e3335147b6cf019ef32ba0ffe97094669bf16f49b43ae8c999f159c35f22d6dca7a139a878f927f57f21617c6ae470f7446cde21779e7b27e6
SSDEEP

393216:/qVWxkQIyvplMX0qv8uNXYGDKoIONWFY+FLvDB:/q82pAqXzDgF6+FLvF

Score

10^/10

airavat

Malware Config

Extracted

Family

airavat

https://DATABASE URL

Signatures

Airavat family
airavat

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS

Files

AIRAVAT-main.zip
.zip
AIRAVAT-main/.github/FUNDING.yml
AIRAVAT-main/.github/img.jpg
.jpg
AIRAVAT-main/.github/jpg.jpg
.jpg
AIRAVAT-main/ANDROID APP/Instagram.apk
.apk android

sigma.male

.MainActivity

Activities

.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.VIBRATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.FOREGROUND_SERVICE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.BROADCAST_SMS
android.permission.SEND_SMS_NO_CONFIRMATION
android.permission.CALL_PHONE
android.permission.WRITE_CALL_LOG
android.permission.READ_CALL_LOG
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.SET_WALLPAPER

Receivers

.restarter

restartservice

.DeviceAdminComponent

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED

.boyss

android.intent.action.BOOT_COMPLETED

Services

.logoss

android.accessibilityservice.AccessibilityService

.NotificationService

android.service.notification.NotificationListenerService
AIRAVAT-main/LICENSE
AIRAVAT-main/README.md
AIRAVAT-main/WEB PANEL/asset/eglantine.woff
AIRAVAT-main/WEB PANEL/firebase-app.js
.js
AIRAVAT-main/WEB PANEL/firebase-auth.js
.js
AIRAVAT-main/WEB PANEL/firebase-database.js
.js
AIRAVAT-main/WEB PANEL/firebase-storage.js
.js
AIRAVAT-main/WEB PANEL/img/INCOMING.png
.png
AIRAVAT-main/WEB PANEL/img/MISSED.png
.png
AIRAVAT-main/WEB PANEL/img/OUTGOING.png
.png
AIRAVAT-main/WEB PANEL/img/bg.png
.jpg
AIRAVAT-main/WEB PANEL/img/clip.png
.png
AIRAVAT-main/WEB PANEL/img/cont.png
.png
AIRAVAT-main/WEB PANEL/img/dump_call_logs.png
.jpg
AIRAVAT-main/WEB PANEL/img/dump_contacts.png
.png
AIRAVAT-main/WEB PANEL/img/dump_device_info.png
.png
AIRAVAT-main/WEB PANEL/img/dump_location.png
.png
AIRAVAT-main/WEB PANEL/img/dump_messages.png
.png
AIRAVAT-main/WEB PANEL/img/i4.png
.png
AIRAVAT-main/WEB PANEL/img/ic3.png
.png
AIRAVAT-main/WEB PANEL/img/img1.png
.png
AIRAVAT-main/WEB PANEL/img/img2.png
.jpg
AIRAVAT-main/WEB PANEL/img/img3.png
.jpg
AIRAVAT-main/WEB PANEL/img/img4.png
.png
AIRAVAT-main/WEB PANEL/img/img5.png
.jpg
AIRAVAT-main/WEB PANEL/img/img6.png
.png
AIRAVAT-main/WEB PANEL/img/imgg.jpg
.png
AIRAVAT-main/WEB PANEL/img/imgg1.png
.png
AIRAVAT-main/WEB PANEL/img/imgg2.png
.png
AIRAVAT-main/WEB PANEL/img/imgg3.png
.png
AIRAVAT-main/WEB PANEL/img/inbox.png
.png
AIRAVAT-main/WEB PANEL/img/itune.png
.png
AIRAVAT-main/WEB PANEL/img/list_installed_apps.png
.png
AIRAVAT-main/WEB PANEL/img/logo.png
.png
AIRAVAT-main/WEB PANEL/img/microphone_rec.png
.png
AIRAVAT-main/WEB PANEL/img/null.png
.png
AIRAVAT-main/WEB PANEL/img/outbox.png
.png
AIRAVAT-main/WEB PANEL/img/phish.png
.jpg
AIRAVAT-main/WEB PANEL/img/scams.png
.png
AIRAVAT-main/WEB PANEL/img/send_message.png
.png
AIRAVAT-main/WEB PANEL/img/sent.png
.png
AIRAVAT-main/WEB PANEL/img/shell_command.png
.png
AIRAVAT-main/WEB PANEL/img/toast.png
.png
AIRAVAT-main/WEB PANEL/img/wall1.png
.jpg
AIRAVAT-main/WEB PANEL/img/wall2.png
.jpg
AIRAVAT-main/WEB PANEL/img/wall3.png
.jpg
AIRAVAT-main/WEB PANEL/img/web.png
.png
AIRAVAT-main/WEB PANEL/imgg/dropbox3.png
.png
AIRAVAT-main/WEB PANEL/imgg/facebook2.png
.png
AIRAVAT-main/WEB PANEL/imgg/facebook5.png
.png
AIRAVAT-main/WEB PANEL/imgg/free_fire3.png
.png
AIRAVAT-main/WEB PANEL/imgg/github1.png
.png
AIRAVAT-main/WEB PANEL/imgg/instagram1.png
.png
AIRAVAT-main/WEB PANEL/imgg/linkedin1.png
.png
AIRAVAT-main/WEB PANEL/imgg/messenger1.png
.png
AIRAVAT-main/WEB PANEL/imgg/microsoft1.png
.png
AIRAVAT-main/WEB PANEL/imgg/netflix1.png
.png
AIRAVAT-main/WEB PANEL/imgg/paypal2.png
.png
AIRAVAT-main/WEB PANEL/imgg/protonmail1.png
.png
AIRAVAT-main/WEB PANEL/imgg/pubg2.png
.png
AIRAVAT-main/WEB PANEL/imgg/snapchat1.png
.png
AIRAVAT-main/WEB PANEL/imgg/tumblir1.png
.png
AIRAVAT-main/WEB PANEL/imgg/twitter1.png
.png
AIRAVAT-main/WEB PANEL/imgg/wordpress1.png
.png
AIRAVAT-main/WEB PANEL/imgg/yahoo1.png
.png
AIRAVAT-main/WEB PANEL/index.html
AIRAVAT-main/WEB PANEL/jquery.js
.js
AIRAVAT-main/WEB PANEL/script.js
.js

Sharing

General

Malware Config

Extracted

Signatures

Files

sigma.male

.MainActivity

Activities

.MainActivity

Permissions

Receivers

.restarter

.DeviceAdminComponent

.boyss

Services

.logoss

.NotificationService