Overview

overview

10

Static

static

10

Telegram.apk

android-13-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Telegram.apk
  • Size 68.1MB
  • Sample240519-t4exeafh2y
  • SHA256 98e7fbd7bb6f124f589d4232f917858c3522e30108e77aeb1e915208a090f8ca
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
badbazaarandroiddiscoveryevasioninfostealerspywaretrojan

Malware Config

Targets

    • Target
      Telegram.apk
    • Size 68.1MB
    • SHA256 98e7fbd7bb6f124f589d4232f917858c3522e30108e77aeb1e915208a090f8ca
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    badbazaardiscoveryevasioninfostealerspywaretrojan

    • BadBazaar

      BadBazaar is an Android spyware used by GREF APT group.

      spywareinfostealertrojanbadbazaar

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

      evasiondiscovery

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

      evasion

    • Acquires the wake lock

    • Checks if the internet connection is available

      discovery
    behavioral1

MITRE ATT&CK Mobile v15

Tasks