Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Shad-app-3...m).apk

android-9-x86

10

Shad-app-3...m).apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Shad-app-3.5.5(www.farsroid.com).apk

  • Size

    77.4MB

  • Sample

    240420-yx5lpshc8z

  • MD5

    116d717823c9cd6a8ed989ee5d0c5be8

  • SHA1

    7c944b80159e78116578d57acdca2000309171f0

  • SHA256

    ade8d0d4511caa63f0d62075e99e39126b5a907a01986ee5575c82dc5748a384

  • SHA512

    ea9621106c0daa87f3d0c77624374b5a3ac4411fa94d455e5146170cd3f57374dbde99faf4c4f983332dfaa1145e1177a618083df1a24aa4eb1084bfa9ac6f21

  • SSDEEP

    1572864:jX0e8kxPDkMFD4iJC4SVB+lhspXvgJRAPGpw8GSTimL:jukJRuivihYCPdpSBL

Score
10/10
badbazaarandroidcollectiondiscoveryevasioninfostealerpersistencespywaretrojan

Malware Config

Targets

    • Target

      Shad-app-3.5.5(www.farsroid.com).apk

    • Size

      77.4MB

    • MD5

      116d717823c9cd6a8ed989ee5d0c5be8

    • SHA1

      7c944b80159e78116578d57acdca2000309171f0

    • SHA256

      ade8d0d4511caa63f0d62075e99e39126b5a907a01986ee5575c82dc5748a384

    • SHA512

      ea9621106c0daa87f3d0c77624374b5a3ac4411fa94d455e5146170cd3f57374dbde99faf4c4f983332dfaa1145e1177a618083df1a24aa4eb1084bfa9ac6f21

    • SSDEEP

      1572864:jX0e8kxPDkMFD4iJC4SVB+lhspXvgJRAPGpw8GSTimL:jukJRuivihYCPdpSBL

    Score
    10/10
    badbazaarcollectiondiscoveryevasioninfostealerpersistencespywaretrojan

    • BadBazaar

      BadBazaar is an Android spyware used by GREF APT group.

      spywareinfostealertrojanbadbazaar

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

      evasiondiscovery

    • Reads the contacts stored on the device.

      collection

    • Reads the content of photos stored on the user's device.

      collection

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Acquires the wake lock

    • Checks if the internet connection is available

      discovery

    • Checks the presence of a debugger

      evasion
    behavioral1behavioral2

MITRE ATT&CK Mobile v15

Tasks