Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Shad_3_5_5.apk

  • Size

    77.4MB

  • Sample

    240420-ymbwmsgh9v

  • MD5

    b568541b504f8d05a55eaf0a61197e58

  • SHA1

    00f5d53f3e0f8bdba698bb05c8b123ab0707a750

  • SHA256

    9bbd7b10b12fe4df281432fbde3da2c87775e7caeb636c75abd10e8813f1d9ee

  • SHA512

    ae7823b0a67903c52da354d6f8669111fe341b3c8c0971f2f9b03357111d0e9bcc0983136b1965ce32a3c0c1c101330da304c847a86de418ca7c21e7add50e92

  • SSDEEP

    1572864:jX0e9xWRA7ZGazs61kZ6Bk08GKVSreDSI1yX+5Dnm:jvxpFd146B/RISru6X+5Dnm

Malware Config

Targets

    • Target

      Shad_3_5_5.apk

    • Size

      77.4MB

    • MD5

      b568541b504f8d05a55eaf0a61197e58

    • SHA1

      00f5d53f3e0f8bdba698bb05c8b123ab0707a750

    • SHA256

      9bbd7b10b12fe4df281432fbde3da2c87775e7caeb636c75abd10e8813f1d9ee

    • SHA512

      ae7823b0a67903c52da354d6f8669111fe341b3c8c0971f2f9b03357111d0e9bcc0983136b1965ce32a3c0c1c101330da304c847a86de418ca7c21e7add50e92

    • SSDEEP

      1572864:jX0e9xWRA7ZGazs61kZ6Bk08GKVSreDSI1yX+5Dnm:jvxpFd146B/RISru6X+5Dnm

    • BadBazaar

      BadBazaar is an Android spyware used by GREF APT group.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Reads the contacts stored on the device.

    • Reads the content of photos stored on the user's device.

    • Acquires the wake lock

    • Checks if the internet connection is available

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks