Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Instagram_src.apk

  • Size

    5.5MB

  • Sample

    240927-q7ybdaxhpc

  • MD5

    74aad7d19cb878a536ef6522f53f337b

  • SHA1

    80aa95eb50058ce57c6466714c717f160df28093

  • SHA256

    fa90312f50c7a4f961ac8f802ee2e2cf3d559f0c38ea65cc1f03f8d830265472

  • SHA512

    89db44002c960a38e9e0853cae9073212c1e106aba26017dd2f15d4029814bed49710f1c322e66a2dee9c6bf0bab3d7309ed2cf11fe71e1c76f885047c7b8eb1

  • SSDEEP

    98304:NwubXW62AALy6GqYZpcQb788aGg82Qr9pzbuV7zphCIJaL31C8UofrFF3NP6a:NrXZJ6nicQHNaf8/IXrJaD1T3V6a

Malware Config

Extracted

Family

airavat

C2

https://sigma-b2650-default-rtdb.firebaseio.com

Targets

    • Target

      Instagram_src.apk

    • Size

      5.5MB

    • MD5

      74aad7d19cb878a536ef6522f53f337b

    • SHA1

      80aa95eb50058ce57c6466714c717f160df28093

    • SHA256

      fa90312f50c7a4f961ac8f802ee2e2cf3d559f0c38ea65cc1f03f8d830265472

    • SHA512

      89db44002c960a38e9e0853cae9073212c1e106aba26017dd2f15d4029814bed49710f1c322e66a2dee9c6bf0bab3d7309ed2cf11fe71e1c76f885047c7b8eb1

    • SSDEEP

      98304:NwubXW62AALy6GqYZpcQb788aGg82Qr9pzbuV7zphCIJaL31C8UofrFF3NP6a:NrXZJ6nicQHNaf8/IXrJaD1T3V6a

    • Checks if the Android device is rooted.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Requests accessing notifications (often used to intercept notifications before users become aware).

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v15

Tasks