Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Instagram_src.apk

  • Size

    5.4MB

  • Sample

    241027-ta25vazelp

  • MD5

    5a303328428b8e1109fa5894b453d00c

  • SHA1

    e12cbd3385ac9ec552287d0f44c172fe2ecc98c1

  • SHA256

    dbbe8bb40f158a4a9cb0cbfbdf6f08b08301dfcc88e02352d54583d8770baef2

  • SHA512

    f4dfbb476fd6b265c6a0ac89c72159863e6e4c391e64e8ef960a0a6fc2eb1dfc906523a9027d6623f47afcfc1476ddaed8f593e215400f1715af14a174cb34e3

  • SSDEEP

    98304:koOaEMM3MisEiPYCjMvNa8GkuRO9fBDXW8UofrFRQ0nAOubXW+kDyVOH:kbZviPRqa8G1EpHdAxXdk8OH

Malware Config

Extracted

Family

airavat

C2

https://andronix-551b0-default-rtdb.firebaseio.com

Targets

    • Target

      Instagram_src.apk

    • Size

      5.4MB

    • MD5

      5a303328428b8e1109fa5894b453d00c

    • SHA1

      e12cbd3385ac9ec552287d0f44c172fe2ecc98c1

    • SHA256

      dbbe8bb40f158a4a9cb0cbfbdf6f08b08301dfcc88e02352d54583d8770baef2

    • SHA512

      f4dfbb476fd6b265c6a0ac89c72159863e6e4c391e64e8ef960a0a6fc2eb1dfc906523a9027d6623f47afcfc1476ddaed8f593e215400f1715af14a174cb34e3

    • SSDEEP

      98304:koOaEMM3MisEiPYCjMvNa8GkuRO9fBDXW8UofrFRQ0nAOubXW+kDyVOH:kbZviPRqa8G1EpHdAxXdk8OH

    • Checks if the Android device is rooted.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Requests accessing notifications (often used to intercept notifications before users become aware).

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v15

Tasks