Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    48s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    10/04/2024, 07:25

General

  • Target

    33ae5c96f8589cc8bcd2f5152ba360ca61f93ef406369966e69428989583a14e.apk

  • Size

    11.8MB

  • MD5

    39387933d529a0950dc3cd79553d95b2

  • SHA1

    8a60daf5cb55e8635f797a4f349bd195da90b43b

  • SHA256

    33ae5c96f8589cc8bcd2f5152ba360ca61f93ef406369966e69428989583a14e

  • SHA512

    93c829897d2a463a877c601cb6c6b79df32e6200c2f84a6c9e3c77bda709edd4f7c25aea24ed7514afb99d099d07d61cfce5ebf8f8d467e650e5792ec625de8f

  • SSDEEP

    196608:BQjUFKTpH6Au1GdQYDcHkbp/BW4jre29ETjHrfvppHmBsfbx+I6pIvT/4l7:KjdTpHW15mp1N6TjHFpH3fbh6pIvUl7

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • com.teleram.apps
    1⤵
    • Acquires the wake lock
    PID:4191

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.teleram.apps/databases/Marshmallow

    Filesize

    36KB

    MD5

    fe70530b536fa55deb1b8911e7281933

    SHA1

    fe532c303f69678e346186bbf0cd7d2787bbde99

    SHA256

    086894a5a6ce1adbf9bd56b2952f850943b893fca483d2617043ba996f9f54cb

    SHA512

    51618f25899663e427bf143c522e5a68871d11de7d91912e1b269b9c3afd09fde156763c603f76f7b4ac173ceb9db8e8e1a85985f080d98cd5a41c28c8c96664

  • /data/data/com.teleram.apps/databases/Marshmallow

    Filesize

    16KB

    MD5

    ff3cb7df43c6dbf0d082315b0bf68ff7

    SHA1

    5bfb627ed03b79da6d5e1cf791aabacb5daac825

    SHA256

    b959115e4d1b5b0674a3acbeeda223131f2adfdaead63b76858551b00acb3c91

    SHA512

    567b989236c962bddcde824a531f18171e351654f40aa38807e638f19844431e56ac9528551cc6bed58d0c5b966564458da02a86e72860b87984e40ba08eba79

  • /data/data/com.teleram.apps/databases/Marshmallow

    Filesize

    16KB

    MD5

    0582eb34c8576f3b0abdec445e8b3b30

    SHA1

    22814aa8e827921854c14e10ff0ee0cac8041b13

    SHA256

    f2d07fc1f8f4ff023530e4653542e39ff898f2a648df167811099f64d14ed2da

    SHA512

    6f88ca1b9b16aa92c50b32d85aed0f1d62c043135a898290faaef512e2127ffa0b782ec37ec6f26d96275cff50b36a6f03e9b48e553e81bb35f45242c6a8497a

  • /data/data/com.teleram.apps/databases/Marshmallow

    Filesize

    16KB

    MD5

    c20a7992a72d6863c07204e1fa1e72f0

    SHA1

    dc00430a6000a0e6150d4c837c750792b279b25d

    SHA256

    f17525de157cf198b71e43b53286feff4d1638e8fb48db61369be1302e23d116

    SHA512

    6ba45c9580e68ad08e365f1e83a5c7461af55eb31bcd0de0480ce2e318b41942ff73d82d958624ddb279a72305a174fea01ab10d17d055d290442949a6f8aad0

  • /data/data/com.teleram.apps/databases/Marshmallow

    Filesize

    16KB

    MD5

    62b121170798adf8a5d89e4c7d7b9193

    SHA1

    be33ae3c95018f87add3e08e7dcc957d67d021cc

    SHA256

    b9a07f1b8521889d884355183207308e9b824dd6e071ff3ee7548fbdff0da52b

    SHA512

    aee08f18f81bb68c65f480ee4e193c50a816e4bdba84d969b2e35737359fc578d708177fbe704e55608a7d83b0e94393c002d6cd61aa49470e4d5811ba6ec1e5

  • /data/data/com.teleram.apps/databases/Marshmallow

    Filesize

    16KB

    MD5

    c706b946de7feea954a9e2c66492b23c

    SHA1

    3783c5f3919a76f9ebb46555b54308e68a66bf5b

    SHA256

    3f72534be76bd5b405e36a21cccb81fac09c295efc7e41772ba645cf5a99e65e

    SHA512

    6adbef74e47c2d4cccecb268c67d9fca8b77d25014689f1a9635032c524a38dafdd206b054dc04b5ffcc4284bc1de3981908278c212d87d861fd275f179fccf7

  • /data/data/com.teleram.apps/databases/Marshmallow-journal

    Filesize

    512B

    MD5

    739fe151c22016fab4b0c366a9490798

    SHA1

    aed2884ac5fdab9c132751e55be9be9216078808

    SHA256

    2bbec90c623152bee4d84c1d96675e4b750472643cd44ec2ba2051f433d8a961

    SHA512

    9fa43eefc6e9487df05e7324b18a4f5026d45a8bac5a39627c6d472cfc698aaf742c2fe3bc0cdc8cf57bd5b019244c3b9ea1c238d1765cc10a245c9b25785b8c

  • /data/data/com.teleram.apps/databases/Marshmallow-wal

    Filesize

    52KB

    MD5

    1743ae24b328b59d1eed71cd7b8b6b6a

    SHA1

    cec6451b2c93c5137c4634ae39ecdd5a356a7ce3

    SHA256

    10bd9d42aa14b33bdc8e1dd42ac26b80879b4c45aba953ec261f331b9e383de6

    SHA512

    366e042363dd2afec305d2389ffd5358c9fb1a1efabefdb2f042f42d9c1840a123d6ba9aa9ff97139cae8f1f4220958811fb1c0d78d70e9962bf58e97a78269b

  • /data/data/com.teleram.apps/databases/Marshmallow-wal

    Filesize

    4KB

    MD5

    92bbfdf9b61c91c4a6ceb242c89750ce

    SHA1

    8241f44d996b9ceb785339823db544255654cca5

    SHA256

    512087c8f9a4f8a04c6ffcede280780a3f65a071706043fc863e7db79eb48018

    SHA512

    05a52e93dbb92bc2abac6b562c7425f6958b4a3cd8978066fc3b41b8638f5db94da8da4e0d7e1ba3e3cf46f8aa794e186fd3d50a31b3399038cf09d6fbedae7f

  • /data/data/com.teleram.apps/databases/Marshmallow-wal

    Filesize

    4KB

    MD5

    9a4b275b134351a44a9f44588c116420

    SHA1

    b7fe2f1bc26ece9bb714b477a3e0973cdc2e09e1

    SHA256

    87dafa8ac9a5bab7288eb0146e42c8b6568ba172a4692446da8236f93bd5d3cd

    SHA512

    5fcc3ce18c785bf6a5b0f69ca8a46424b3efaffe502f184d36d78514082274eaddfedf18ea921a602ddeea52c62016e734023f08e75313f5c2809185b6bec6ac

  • /data/data/com.teleram.apps/databases/Marshmallow-wal

    Filesize

    4KB

    MD5

    568ea4f27d96357073c8ee26a4d3d88f

    SHA1

    3827c0f765e4252251484c2c4f777c1b48a055bb

    SHA256

    b39222f4723b7e3736f3b7e9ae651fbbe6d04f5ef107b7b7cbd4068907e20f15

    SHA512

    87673f323831cf132d1f1ddcd31a46e40e09f9fe1290405120249537ac1001f769caff36a85e66634639593d86543b726339c4c785c2078bbaea08b3a0737459

  • /data/data/com.teleram.apps/databases/Marshmallow-wal

    Filesize

    4KB

    MD5

    6c145ba331ca9e2f7613f8f0fae4244d

    SHA1

    43ff9ae385ef5d0ca538766761277a3cb1b728d3

    SHA256

    adbc5ad4f82435aebbebc20e195d0a374295a085feb3db21eb4a1b643e4292b0

    SHA512

    7f3b861dc2157dff58593215f4dd19da45e14001131adbf323a789f27618ab29b5e4184bdb2dffa98f7ccb50da411744a9adc7e0f848b7e3fea00d4c68e094da

  • /data/data/com.teleram.apps/databases/Marshmallow-wal

    Filesize

    8KB

    MD5

    057b386c6989351a47094095801ba134

    SHA1

    1d2f885d9144ac8451d3100598489271ab0189f8

    SHA256

    da35e92564b9bcc05fbc7a18c240fb203ad152d0f6a7314424ff9e53953523e5

    SHA512

    3d631439944e606da53b3159c5063131fbe9d786a870aa4e92b3771d3464e9af1f18c56919f3c52bf6e3cc052869005dc77b8bd9c9802d7b914aa610443e0869

  • /data/data/com.teleram.apps/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.teleram.apps/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    c15c28255def13410bf60aaf38ae7523

    SHA1

    43f4e9ac0bdbfc3cace63c33a994743c9e77f0f1

    SHA256

    961ecd151dabfe4d929d5b574e827bc82fe494a73388ac60c0717af3c333a897

    SHA512

    cdbcdf0257569cad5f30c18eb86056834f2846ef81ea5507001561f09ef94c151f259f62697d0cf0c89473956418badf4c6c1bcb5987fe6c0e70936ae144f35e

  • /data/data/com.teleram.apps/databases/com.google.android.datatransport.events-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.teleram.apps/databases/com.google.android.datatransport.events-wal

    Filesize

    52KB

    MD5

    a903036718f1989165d67d94e9f6713e

    SHA1

    9880de85d7cea11a230ba804cac4808f6861cb96

    SHA256

    3b67ef29ec0a531da08ca13e009312086e42c4b53f55f104406f85efa7247886

    SHA512

    c94c634cce5a83fe214275c1bcb112133105c731d3e8787eb6f4b7d8ef3c4afda46250b46ca62a399dfb6e3701a006772b30b02efb5c9c02d3a5461d81d73895

  • /data/data/com.teleram.apps/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7237409e0640cfab7bdbd429bf821a3b

    SHA1

    4c3da934842f8d4835dfe2a9c275a300e5123309

    SHA256

    5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

    SHA512

    c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

  • /data/data/com.teleram.apps/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e5d7251378408a5e20d76750e955cd6c

    SHA1

    c309737659c372c462261b5d3f2218a1327b14d6

    SHA256

    61f04f8c435874431f2d27e6046f99033158def5be5ea40c568b291242028e21

    SHA512

    0947b5d182d0dadf292eb055072428e277f2caf693d17305f85bab59e3faa59e394ac74152d94faaa098df1bce1da025e69eb76f7f6c47f88348e5c582a7747c

  • /data/data/com.teleram.apps/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    6c0fe855d942d705332a737c3491eb9f

    SHA1

    87b8cfba11aa6a66e699764f87571378fd2efb13

    SHA256

    c14a659bd60a7cdbc60f09b0535f4d9e4e31643b030767c1fc3a87fada7845d5

    SHA512

    5c3f2987bffb41cf2e804f5b51f0c45174fe2eb0ca07eb93610d397d2d6842c8d5ed0a74d11ffe50ca2771373aaa6451dc37d07e85547103995e7f4138ccf3d9

  • /data/data/com.teleram.apps/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e90df9965aa00d0ece97431d76d3765a

    SHA1

    e763cc0c9774bb723411e0139f02908423cee6e1

    SHA256

    a59f162f82f29283595faa4646aec63e1e961fa32ca4bd5fb65ddc0ff771e337

    SHA512

    2f77642c210a672f577fb7fe6de6db69e8d2c201cbba03c41aa87864a92fe9a4fd11eb66d9febd195267a2bc7fb63070ef537758f7b45f0975acfbe793c84668

  • /data/data/com.teleram.apps/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    3901d5dcf7c2a03dbd8f21787dd5e161

    SHA1

    b30c5c4335a8f712a6c54a64424490adf9a73f0c

    SHA256

    4345765643dd4d8e2bb9177dbde58908391c5c252b5d5cbb481595e4b8d747ef

    SHA512

    ea068ddf5456991110a5b2d5a18ae79849669cd16ff31e064345eb410236afe71df52e555f0d6d153e45402e3062878e16e1eebea836b56933ee58e18b067acd

  • /data/data/com.teleram.apps/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    44693692da738db6eb133cf0e4cde91b

    SHA1

    e6bda56494c325d8d37ad89552263ae85d9b0550

    SHA256

    8fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4

    SHA512

    b34ddfe1ae343b1b12f7029ae476a0ba8e1b4043ccb520afb412b3f71335ef679bf29723c9a5c00af7e922e9982d5b3af54b2ed779da8cb601f378e5b9d26be5

  • /data/data/com.teleram.apps/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    5dcc7bce6623483098297c49db10d95e

    SHA1

    bfa70de4fa6a1b48d49b81886743bf778f6fdd42

    SHA256

    cfb92f9c97abbe759c9cef2d5d1fb667dce6c80aa49040a821ccb11775df7044

    SHA512

    6ae94ca863e91fcc57d8906b536405eb6f795d640aab35e515f90c47a327861407c6f8c69afe4d71c35e00612bf89c792629d3d0c512844d70e932592217d564

  • /data/data/com.teleram.apps/databases/google_app_measurement_local.db-wal

    Filesize

    36KB

    MD5

    43104aebe41e2200d871b59c0b76c1fc

    SHA1

    d4a5e97a523dc1e2f440898c00b6056d24696abe

    SHA256

    68b23bf8dce9ae18e5fc1c7ce94ae41d455b3a2592e0da2a478a0af9e3be5d4a

    SHA512

    42836eba455dd6c10d8a3288cfffd251668f3ceb8f48374baff3e8e6ce6b979c091a2504ce42c843d9c96f762770d483a4d1a6df4b9db92e5852c46e2c46c62c

  • /data/data/com.teleram.apps/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    7e7053819c9dbb26ebbabeb1b1d71564

    SHA1

    a286fa9fb5f5586a71eda2d1df0a705f0533e9cd

    SHA256

    5159c09787c781d2e34c93a35f0551821a4d5f0242e89ad5c2d8f2e63b292630

    SHA512

    230555a277a6ff408dfcadcdbc1b3c827a41cb7b70d6793db07503852b109076528bf6c309af93f44a2722278449a6ac1a328a9139832d8b99ed465b9ef987f4

  • /data/data/com.teleram.apps/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    23f7b144da1872dcbed89cdc6e0eae28

    SHA1

    10d88b3498db289cc1b21f7e75168b1f26103803

    SHA256

    05d047f5d0887a0a96816393870515bb81c39cf2e53d55152a6878f5c590d659

    SHA512

    86a8ea58358777f5209125f881ab6606185a91cc2d4688f8436bdc1906c01fecc1c795c70db92b76779a1343b8ffc9ab58f58c25b78b5f40bee02ef8d0ad5830

  • /data/data/com.teleram.apps/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    1698790df3263b0b0ad9b5d9e3fe234c

    SHA1

    b9143b15fdf3d07eec7d5ea91a519412ca9fb213

    SHA256

    0d949d0cef8a06095046339c2459fb7818cbbc271691bc32f29a4a71b4213537

    SHA512

    08d513f190d7df7143bedc4fcb2429aab397bc953eb06091e3c57203276047e9f87e16777de1feac8ddd779d3fa3a14042dde63d79199bb7280b8ad5bc3ef6cd

  • /data/data/com.teleram.apps/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    05141f18791bc8212fd3833c56c82f16

    SHA1

    fce9c1b89edc038b33b0c163bef11b3aa49faaa7

    SHA256

    991cc5182cc7fb4004b625020904872ea3b95c3425f1fcafae0fa2acfafb1812

    SHA512

    ae79543d1f346db7e53bcae6918d4e7628c7effc85cbef6f27751c9e626754dd01d4c004c87543a78970fe78bd5a87eca29ad06ef13680db72fc0ceca0fb7131

  • /data/data/com.teleram.apps/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    d5655ea64c9b771dca28af53435086c4

    SHA1

    a10ee7841f1c88b05b70122483ad5f535c77e684

    SHA256

    c8ffba469bf9e8df8f546d48d0b6b47e15c33cd48e74abf28ec13af7ac6ccc27

    SHA512

    fb37a143833ffa3897994e5e8b8d55dd0d5376c45e40eec72683eda452cc6e06d7efed683254e91b03a00c202e76bc223ffd415eb598149dd4e1957c0bad5f2b

  • /data/data/com.teleram.apps/files/PersistedInstallation3043083328546899329tmp

    Filesize

    90B

    MD5

    db04f4a6c4cd5e9d65611511810a578f

    SHA1

    323bfca36c1d31c913a3ae5e7cc26bc0cb30976e

    SHA256

    cc98d2ca8f5268fbff8c01d6ad3f2a359075f39376f4793a488f2db9d02f6b26

    SHA512

    22b1ea85c42d35ff280e81714396f3594a96fa111cce9fa02a29ea437d30d13971e3e899890682eb18ec38341535bdd4ace52c835e9c230f7f09511e2aa9c13f

  • /data/data/com.teleram.apps/files/PersistedInstallation8080223075684218065tmp

    Filesize

    570B

    MD5

    ddd647920e5b2136477b2aff90dfffdd

    SHA1

    f3eb94f860a9c161b84e96f99210bef3b39b9715

    SHA256

    65fc646350f97462cd9d79bfc571e39ce912cd40d4677baadceabc29baf622e4

    SHA512

    6562826b376493cf26d3c1aca660a2959e5e8f995775feec9e37d8c8ef46dc753a48da70218e6133219de343c593d768fc1329aa4117c0e61261fcc93b339e39

  • /data/data/com.teleram.apps/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    8fde6c11c589542a088653a9b444038d

    SHA1

    5d7937c2d142a54ba17861eaa312655267a69a92

    SHA256

    0096b7fe77a7ae618f16abed01bd0d20f71e4722bd394d6173fcb053285fe972

    SHA512

    be976e6b7d6f31a09b857e60c491afbac6e6171fbe502eb437c64acc9ae2614f8581c9351f5cf5e4437fb1057ed7abba869977d8b07ed298cfd1fa9af6fe16f2

  • /data/data/com.teleram.apps/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    6a1625ec0973637502e7540f9c8d7c0d

    SHA1

    88735d3fe9c7ad47681c74f753d02678ac1a8553

    SHA256

    93a55090756801256693346c1efe1ef54aa07a4846f51cc52dba93906942b945

    SHA512

    15828ec0eef6dcbe80e29cbc2b82db961f5487fae45ea659e07828a7ff8a440ed6a09158c860ea4760d7b44d7e7acf9c73fbde15f24049ed299cc9b0b06ff5cb

  • /data/data/com.teleram.apps/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    4afbda1b73ccb740ae140aa0dd54a0e3

    SHA1

    1ce9e623fcc33b448c7dfe3f0a57fbe7ac340f02

    SHA256

    da13c32ea8b1c6eb5bd418fbf4fd2d776128570a04537acc0fbaa9cc049e3d20

    SHA512

    501a583a76d874b3b48cd224dbe8e2f2e039fc06fe808669c0eb93b7e8c8eec7ea6fd15f9d758b8c632a07237bea606b48e3a4d2b326149f81499b585dc2f3f6

  • /storage/emulated/0/Android/.com.android.setting/info

    Filesize

    46B

    MD5

    809e444dd831662784f0e21043971f9b

    SHA1

    749faa12dea3b21dafd6b40da457b7da03df49c7

    SHA256

    a73311cbbb7524ccea2f6f10eab805c340417b2fd336d99ddc4e4bc155cadea0

    SHA512

    bcf0e899765feda5c2daa5c1f7cf717fa703f58d1fcd03b9816dca171351ef2bfd5316a18d0863461844c6bff75862e84f0e6e97b19c3eafd621fc8177ec0ac2