Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    telegram-10111-androeed.store-0-1713402981.apk

  • Size

    132.0MB

  • Sample

    240427-m58gsahg61

  • MD5

    25dd415228477d4cc60b347766eae74a

  • SHA1

    93b60a32536d16f5b66cf0b1b4b0fc7a4b0cbab7

  • SHA256

    4aeaf97b0156fa3ef95efebcb1bb401042e5b95633f64d4da1e33b604fab2e78

  • SHA512

    5817bc2554915385fb2a77d0f33cbe71c29f0c276e43a77169dd89d5544374a90bd7650725e00084fc0fdc82a0d2f837c6f900a0ba1dd260c4d3fac023c0eb10

  • SSDEEP

    786432:QeO40oq0w0Qurjo9TX6mn1Lo2ZN89XFu7aurSWV3zTVOUT9PtZ7dz1uiA5tUTs5c:440oq0wXQQX6YNLw1ubtJKWg5Gi/8Ww

Malware Config

Targets

    • Target

      telegram-10111-androeed.store-0-1713402981.apk

    • Size

      132.0MB

    • MD5

      25dd415228477d4cc60b347766eae74a

    • SHA1

      93b60a32536d16f5b66cf0b1b4b0fc7a4b0cbab7

    • SHA256

      4aeaf97b0156fa3ef95efebcb1bb401042e5b95633f64d4da1e33b604fab2e78

    • SHA512

      5817bc2554915385fb2a77d0f33cbe71c29f0c276e43a77169dd89d5544374a90bd7650725e00084fc0fdc82a0d2f837c6f900a0ba1dd260c4d3fac023c0eb10

    • SSDEEP

      786432:QeO40oq0w0Qurjo9TX6mn1Lo2ZN89XFu7aurSWV3zTVOUT9PtZ7dz1uiA5tUTs5c:440oq0wXQQX6YNLw1ubtJKWg5Gi/8Ww

    • BadBazaar

      BadBazaar is an Android spyware used by GREF APT group.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Reads the contacts stored on the device.

    • Reads the content of photos stored on the user's device.

    • Acquires the wake lock

MITRE ATT&CK Mobile v15

Tasks