General
- Target Instagram_src.apk
- Size 5.4MB
- Sample241027-ta25vazelp
- SHA256 dbbe8bb40f158a4a9cb0cbfbdf6f08b08301dfcc88e02352d54583d8770baef2
- MD5 5a303328428b8e1109fa5894b453d00c
- SHA1 e12cbd3385ac9ec552287d0f44c172fe2ecc98c1
- SHA512 f4dfbb476fd6b265c6a0ac89c72159863e6e4c391e64e8ef960a0a6fc2eb1dfc906523a9027d6623f47afcfc1476ddaed8f593e215400f1715af14a174cb34e3
- SSDEEP 98304:koOaEMM3MisEiPYCjMvNa8GkuRO9fBDXW8UofrFRQ0nAOubXW+kDyVOH:kbZviPRqa8G1EpHdAxXdk8OH
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Instagram_src.apk
Resource
android-x64-arm64-20240624-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Instagram_src.apk
Resource
android-x64-arm64-20240624-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
airavat
C2
-
https://andronix-551b0-default-rtdb.firebaseio.com
Targets
-
- Target Instagram_src.apk
- Size 5.4MB
- SHA256 dbbe8bb40f158a4a9cb0cbfbdf6f08b08301dfcc88e02352d54583d8770baef2
- MD5 5a303328428b8e1109fa5894b453d00c
- SHA1 e12cbd3385ac9ec552287d0f44c172fe2ecc98c1
- SHA512 f4dfbb476fd6b265c6a0ac89c72159863e6e4c391e64e8ef960a0a6fc2eb1dfc906523a9027d6623f47afcfc1476ddaed8f593e215400f1715af14a174cb34e3
- SSDEEP 98304:koOaEMM3MisEiPYCjMvNa8GkuRO9fBDXW8UofrFRQ0nAOubXW+kDyVOH:kbZviPRqa8G1EpHdAxXdk8OH
- MD5 SHA1 SHA512 SSDEEP
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests accessing notifications (often used to intercept notifications before users become aware).
-
Requests enabling of the accessibility settings.