Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Instagram_src.apk

  • Size

    5.5MB

  • Sample

    240921-qb4taatcnf

  • MD5

    d87f307ee7d8b370e380c3b3ca0e36d4

  • SHA1

    b8833d2586ec78dfdc012adf1f67a7f57385e211

  • SHA256

    429b1b3d81802f8755c79ad8685fc3e02c37cad880c29e3a1ad7ce088b6764a4

  • SHA512

    09df6c82c9c1fad65506a86fdf7f5c947d60f8bc5062899444516c185e2d169001e33b8a02aadac43d2ff54bbc51f817b2ea007ebe9bf754e308a9c9dfb5ef1b

  • SSDEEP

    98304:NwubXW62AALy6GqYZpcQb788aGg82Qr9pzbuV7zphCIJaL3128UofrFF3NPni:NrXZJ6nicQHNaf8/IXrJaD1P3Vi

Malware Config

Extracted

Family

airavat

C2

https://test-9e4a7-default-rtdb.firebaseio.com

Targets

    • Target

      Instagram_src.apk

    • Size

      5.5MB

    • MD5

      d87f307ee7d8b370e380c3b3ca0e36d4

    • SHA1

      b8833d2586ec78dfdc012adf1f67a7f57385e211

    • SHA256

      429b1b3d81802f8755c79ad8685fc3e02c37cad880c29e3a1ad7ce088b6764a4

    • SHA512

      09df6c82c9c1fad65506a86fdf7f5c947d60f8bc5062899444516c185e2d169001e33b8a02aadac43d2ff54bbc51f817b2ea007ebe9bf754e308a9c9dfb5ef1b

    • SSDEEP

      98304:NwubXW62AALy6GqYZpcQb788aGg82Qr9pzbuV7zphCIJaL3128UofrFF3NPni:NrXZJ6nicQHNaf8/IXrJaD1P3Vi

    • Checks if the Android device is rooted.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Requests accessing notifications (often used to intercept notifications before users become aware).

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v15

Tasks