Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Telegram_v10.12.0_MOD_modded-1.com.apk

  • Size

    72.4MB

  • Sample

    240427-mx3lkahf2x

  • MD5

    28799f01448c1382eb0bf8dc24ac065a

  • SHA1

    b9de67b8c6c55eda70fc26df5aedb97d4a2b8747

  • SHA256

    e9d16891e6ee12cdc6fcbaa0850de4952653e8474f5c0e45f6c989bd627efb8a

  • SHA512

    146f41c175dca391adee4c12acb4b7525cb232153c4cb1150f23a116d25f947bae4393316d8016b79e45e5f5ee07acc4f61d731674018673d6e84047f14de02b

  • SSDEEP

    1572864:7wogaA6GCK0UzbUqq+L0hfildnsWd5fHYZWsKg624EYaUYB0GR:8J6Gf0Uzbzq+0fq6gJponYa/NR

Malware Config

Targets

    • Target

      Telegram_v10.12.0_MOD_modded-1.com.apk

    • Size

      72.4MB

    • MD5

      28799f01448c1382eb0bf8dc24ac065a

    • SHA1

      b9de67b8c6c55eda70fc26df5aedb97d4a2b8747

    • SHA256

      e9d16891e6ee12cdc6fcbaa0850de4952653e8474f5c0e45f6c989bd627efb8a

    • SHA512

      146f41c175dca391adee4c12acb4b7525cb232153c4cb1150f23a116d25f947bae4393316d8016b79e45e5f5ee07acc4f61d731674018673d6e84047f14de02b

    • SSDEEP

      1572864:7wogaA6GCK0UzbUqq+L0hfildnsWd5fHYZWsKg624EYaUYB0GR:8J6Gf0Uzbzq+0fq6gJponYa/NR

    • BadBazaar

      BadBazaar is an Android spyware used by GREF APT group.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Acquires the wake lock

MITRE ATT&CK Mobile v15

Tasks