Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
7s -
max time network
134s -
platform
android_x64 -
resource
android-33-x64-arm64-20240229-en -
resource tags
-
submitted
14/04/2024, 17:05
General
-
Target
Telegram.apk
-
Size
85.8MB
-
MD5
a8f9aa86971215ed95417b98403eac49
-
SHA1
bfcf6069bdfec516e78540f6140e80abf05516f7
-
SHA256
4f2de912db0bed6a882b61766e45a5f07003c040505456d36135a9d61c4a7e42
-
SHA512
dd997cf77c5f2acd05eb743ffd8d6efe030a18e1fd2d6022f8acc7169ad75e1d45d0a9169efc0662bea9458943c3745e605a71e9472edf8b78487325727b10e1
-
SSDEEP
1572864:TX0EWAIYcIkZ2TGiP3QWX/JMC5OwtdE/UteLa0jkXA8vBOHKOGUxKlYl0:T3WPRZsGQvvJR5vSUoL3kdBaY
Malware Config
Signatures
-
BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Acquires the wake lock 1 IoCs
Processes
-
org.telegram.messenger1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Acquires the wake lock
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD570ff1ab76424157194becad2a855693c
SHA1201aa8192b9a50b1c8d3377ae274b451a2331a04
SHA256edd39873212a0f69859a31b277404ca294e88a1cccccf36d77d0aa30eb9e0bf5
SHA512dd9f64a8a23344e8c56f371d2dae107214bcf03904b6c5144238f81f8e9c57115a71582c7489181e7cad3af46432010a894c1510f8de9cebf0214ca8a0eb6540
-
Filesize
512B
MD50f42d67ebdf52f4777d6d921d2733e67
SHA1a4bd02272c788eefdd439bef497aac09f89e5041
SHA256a54c5dffe1778963fa143ea82b9f18d8ba3e66e77262beda40ebe1e8764d734b
SHA5122d3734c021a45a4c60c34bb0bb01b5e80a8d3845e360040fea02e3d172dbfca362614b5d968243634aa1327d2e2a73595d5efbec1441ac65426e946b7fcc0658
-
Filesize
8KB
MD593a7bfd698fd3587376db147f0c64888
SHA11077252e0995500976c2ff568910deaab4c1f044
SHA256add4d190324a78f5d8b23f8d3a115ca3d400c562126affa0a7791e6ed6fcf491
SHA512d007b06601e5fabbd5118e7f3612974734007fc86379225df366ae6886f4d62c0cb59d588aab4e3b5a3608b364a2341230750bd60e43fce865e8057a76f3e190
-
Filesize
8KB
MD5ce2b1765785b52b4863d0efc394ab617
SHA13594032042f290efc58d6cf7d5e861f43cfb76c9
SHA256c64f3f29cccbe9232dd33c4d1945a8cdc7c95a6c74fc3a1eacc7f246b919cb74
SHA51209cc421d4735bc76c2c9272672b624fa5f37ca4a77a1dabe657a754a3d8456ce617feb53b985d09840c7fcd5433f2bf7f21915a3409dffd57f402e429b6dcc27
-
Filesize
114B
MD50ba8105182614e0422284cef7c7579e2
SHA14a565c2349f76b650e3d1b0d1caa6ba73b709407
SHA256d33f80d3acf5b2d11bb0dbc3250e015215ae29464cd94e94597b689437706199
SHA5121ddb00fe134bf283ed1ab5f3ff04a5aa72f1c853bef26c0535941fdaf847c923109d471c34b8ae25028f9ad11c9c94a6833eba13b049f53107e9840ca1ec0777
-
Filesize
90B
MD555f80a4119fa837c74e8158f2b1cfb70
SHA1027be06af84fc51e0b8f8cfe15efd63898882d69
SHA2567caaa3dcd04e09e1301130dce63e8d3a2b91f17281237f296788fcbd6e3bb873
SHA512aabd1c7017b96afd3558a12e401ed4bfd3b75aa9dac4b3d5136fa1c7d94efc16e9a9f3f698387333eea12361cfa2d78df50c04936a406bc9b6f014070f1d6d39
-
Filesize
4KB
MD5689eb9d3d2a866648f68f76e6a8c3d46
SHA1ba65af36973bb4cb831868ec4882ce204bffb597
SHA2562a8c5af4b19e1144088ff271ec893e963a454107facb5f7155c2ec33cfa17b6a
SHA51298392c13983b1dea2b080c383bd26cae10b411360df2fe4192bef6c0958b5f6bbff98ad876d2edbd8bd771f0e8519ad9c3cc50ceff56afec569bdae864b14d83
-
Filesize
512B
MD56e9eaf29e0361bfedc0386793f27fdf1
SHA1d9a6e905d099546e19a60f666ec9b0065a7405f4
SHA256ec81b1b86d632a7bdbeeee49936482a75582d409ea922b6732d55e052726e715
SHA5125c0028fca87917a49faf4bad9ba2bf5f17b4b12a5a94428209c901ac172455326307691fae78500ec69489b173a673c307ad541593509122e79a4ffcdf05ce87
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
1.4MB
MD5a785316c3445fa4438e09948de88add0
SHA10ac87090ca55dedd40b573c25758b1c15758f1e4
SHA25670d5fae0fc55895dff0566fb8c8af9d832c2303ee28e31c7c5118bc341d4155f
SHA512226e2c054735c501908b0a025b8df1eb7cd05b6ee2d9fd03c1874c34200ac1a1a86a8351c73398be1922380a9f2633f791dcbb675cd031089d61b3cb0a67a6a2
-
Filesize
908B
MD5d76b80c929c4dc2030659a4e34086d30
SHA1bf60d71fc37ffb88c4d06624dc4101a2587bc184
SHA256546dbbb250eb993b542a12077e78a893485ed9691c129e32403f1ea5e6272344
SHA51253c04691a2d5dc711cda0bb075d7e6d92e58505204dccecd07b89016c644b7e628aff4d0b0347b6798f5f4d0a287fa0a2cb8c966dc4a0aee9d9dcd675a94ec21
-
Filesize
912B
MD52a0abdf7117614e17e04d2fd530ce75b
SHA1e71311be284d886902b35db863d89048bb22c939
SHA25610336f2d8b6a23e3bc59fe068180320f14928674e59faae623613b7d5a045773
SHA5124839c12f1209e60c55bb4aed9ca53a680ba1b8bc419f2e4630ac6bd8aa10ad5e28ca6058194a4ee9963dfb36674be2bcdbae314d4ba920e6b5d9900780440cec
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461