Resubmissions
20-05-2024 06:38
240520-hegh6aga66 10Analysis
-
max time kernel
318s -
max time network
324s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
-
submitted
20-05-2024 06:38
General
-
Target
Telegram.apk
-
Size
72.7MB
-
MD5
3c1c87ec69fe57ae2aca6b24a1c819f8
-
SHA1
f4c7d1161a6fc09448bf56bb7cf27c3c11d4497d
-
SHA256
17a0d8c197feaa1dfa63d89713d30a3a02f879f39a35095343ad085be48e6b49
-
SHA512
c4ce9246fd1b62ada412b12fc03381470d6e2718dac79ce6202859ffe7e262c6b10059bd3a06330115c7ad9e476da29c68ae607b1f8e93f24b94dca271d15080
-
SSDEEP
1572864:AsI8T/iWuT4CK0EzbUqq+L0h7GldnkWd5fHYZWsKg6U40oq0wXQr25k:1bT/iBcf0Ezbzq+072SgJp6Loqt025k
Malware Config
Signatures
-
BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
-
Reads the contacts stored on the device. 1 TTPs 2 IoCs
-
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes
-
org.telegram.messenger.web1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries account information for other applications stored on the device
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD5c976894f49a54ac9e45181133a8850be
SHA1afdf235ca272c7182126281429cef39ebfd528ed
SHA25645eecca27c42546e781b663733b83392ceb82d1e3b14d1d5b3176f1e3ab0a5ba
SHA512222a7208a1e399e4ffa8c7d8f1d420c2ed9f7770dbcd55b50bbcda11cbc15a9cfb6a59020f02bba591832617a2cfea458166599fadffbc7c3cd5d63317dd114a
-
Filesize
512B
MD5907f4bf23727621261c41f734aa6f0ac
SHA12feebd3eae35cf4dc5a5db25ab0438a20561354a
SHA256716bf039d643ac3e8438148e06a9aff03b583f6bb14f1aefbcab205f8563873a
SHA51216274f04cda396b1b602f4252c6ec70364b1c13eeef748a855ff5145b058aefb9a1185ac6bf5f3bd1d5c64a08cc4ec11db3e2ac5d5afb9369ae25648a39abab7
-
Filesize
8KB
MD5e3c9f77ba9a858244493972f49e604a7
SHA1b5698f0f6d60a311e9af3db96b2412bfd327edb7
SHA2561700e2727d9a5181c054479ea73d3c0469c7f4fcdb3845d940da70a710370597
SHA5129c2924e3ae3b6d0aa3282a005f90bfbd0846cbdb8ebb0387897b050491202ef350c1f7e2bc5c156c34e9e0eff14cc733e335c7fd109f0add71cd89fff266b905
-
Filesize
8KB
MD566f39ece05d556f43415b26dfa9691bc
SHA1899a7cb10c3519ddbda855957796170f52036da2
SHA2565a61fd723cfe63a0a2f239074c33e1938ba466c0778c5a572414df9c1e93c5bf
SHA5127228c14fd85fcc8017667d10602a29bebf772b1d541665a75ab83583fb1ccbbba5815afd1b9561b2e048f5691f0afc86633f3c1dc3ab4fbcd4ceea02f2e5dd3d
-
Filesize
90B
MD527ae90e3287bc2fa4ee703823b808931
SHA1f7e559174307a7312c5c0e4ec093b4ddb080c44a
SHA256844383ddcc3d07a43d9008fb346be18f44ae1c16d23885fcabc35769634f67e5
SHA51227872b139596eaab08b70237f9753d6ad6da7a25f54e3d5f97dc9a8377bc7440e27c25bc491b7c71446be48ef91690fbf291f929124468bcfb588f9588376192
-
Filesize
566B
MD5eebc666117f7545ba910ac441695eba1
SHA1cc0d0a2d27708080f988badf04b885526ba6fc76
SHA2566f0d98dc08e996a4e5988beffa4b966a29d3953f99a69c878ccdd2d7dd8666a6
SHA512d842e7349a61316bf96ae82af6160b6652e1f0285e21d1f98a008448ca7366d392ba3b1f38437263311c769addc6a1765b4e74c673e9b98026621aef635fa8be
-
Filesize
512B
MD55aeca3debfbbcb949e672bad18870ae6
SHA15a54188a63b7e6f7b7d02d87feefaa89bf669fa0
SHA2561e757f7bfd20149425e40160acbd76a8c647a62426d3501a7ae59cfa0361772d
SHA51291d4d879a964a09734df8cfa8981ce69d8da25338f0c40460fe2a96454cbd4305987f99e373f92b659adcca2c2eff694abb22eee1a02f86913c10bd6b83d101f
-
Filesize
2.1MB
MD55b08270ddf555dc1aacc5b9f9789069a
SHA17a5e6e88e371ec38508aa66d3a0a7f1d9b29db47
SHA256c90747ecdcce42f25f3806ae5ad9e7337451dab6314098589c9303da194b0638
SHA51263c3938d89fb6ae11059e60c1b58d2ca1736ecfd6001a301f58ec289d75b25d22b727f9f03773657c44a5b866469665f36a45c419adb834f411a2b2b59f1cdfe
-
Filesize
40B
MD5098b011c59a80daf15c048dfee00ff1f
SHA147963ffe950f64e4ab0d329f111f1ea61e1f72c6
SHA25687152114f80cd6a1b36e7649f2e54e18e347d15b45ca4245e1b2f20922a8f037
SHA5122caea2577cd87ab62be62621d976c650f14f063b6ef815d23f218b35b17354c95f2a56d595fce876750fcbb47ddbdfa844812e1218d77aa5249d85dd349e16c4
-
Filesize
612B
MD5cc24621129ce32b4484eb2bbf9ffb62d
SHA18fffa0f780e2963180e0143a69a6b0623634a539
SHA25634868cef36ffa9db9763b370d35d44ccf6f22b26f6eca8b708929ed153b1fb15
SHA512b3aaf4a5f8a53d43597d1b20612da704d665c90e54ce432396d5b152f482d52e5e37d6889831b6c6ff18b85b4d5681cda27b8afac4e2b87a6c4cf957245dda58
-
Filesize
908B
MD5c866d0f84b7ccf46aa7d2deefb1625b0
SHA14444cb9e2da5d6f9c3fdf1e109ac2075575a9813
SHA256d3d557832885d24513b016370d80a0e10a85ad5822533169f20aba90086613fa
SHA512fac598398f1034fb8c6dad2b22b2be14297eeb35162dd261f0dccf41976f4f41036340a1053aab1a39d8e8680cd9853c18db6f7f00c0959819613f0f26e888bd
-
Filesize
912B
MD546b22d98aac257c25a09299e6252d911
SHA1214449adf322bbd795f69fcd2e40dfdf8df8fea3
SHA25639236d03dfd2bb34025f62e96fe61c19adf7a92c3253f1cd0125be1ae8c6817a
SHA512d099313c0c96fe141e33863715e381e3d99a3dafab63d17c2c45782ede58efa2da7a0c55550400144be46d00e995759d0e1e3883f59f272c354289e5d341dc55
-
Filesize
1KB
MD5dfc5e86e776a2f93de5f578406737fde
SHA1c825c55cc7129ed054e1ec3c140e376b096b690c
SHA256c6a7ab5a72a605517a697bb70576d9dcf11df5232bc156043a2e95d5fcee9c48
SHA512109e8e86f451d926cb15fcfc3e1dd7aae19f6a4072680b691a8444f5dd4be692b74c74c82e4e6308e07fad67a99f02c69625bbdafc5a1ad898eefde200af4ff4
-
Filesize
1KB
MD5d332871518cb1ca5c2b7ccab20b67384
SHA11639a6682c0a06b3bb33136c973c8dec4a8db0a1
SHA256bffd445c901cea43a198cd20c8c49e83ac1cb7db75854e282c10e7327b0b8742
SHA512dc7b36211469e0e857764a1097e83df96d5f8f28e88e864023bffaa2d1ee8e79edd9e2a612d3c52864a5d8e46ef318c9cd31003369ffcbf45372614fba4ed121
-
Filesize
1KB
MD5c8c2071e610a2c7ee7eaf77100314b7e
SHA183d47969dbaba2ec35c5a28edac014c850929590
SHA2569da2eecf6ed69d483393648de5a0b4314e839bc52f338948fe6e042e0f57e731
SHA51200357244900790ae35c982fe63a693c964a17cfb958685704d6ac478e0c224d64dc84d0962d928bd00e14f45781c7147768f214702a718481570722fc13ffbd5
-
Filesize
1KB
MD500e6be5729d2c873fdaf0c0501482d5c
SHA119d7c58fdf1f9fda00704a583caaf13ed864e4c0
SHA256685915189259ac3988a0f078687e123863bc749f933c986ee9b940f0bfd5c3a0
SHA512041c6f4bdd26cd64c4942438a193e0bad802d612808f1e67401fd401502d24183d979bac75125f06166f65ab7c7487d7e0879cdecb172b9edda2b72de0ac276f
-
Filesize
512B
MD5a07b700555c3961d4c722124715dd8f6
SHA18659643601683d35aae3f72874219c240792e6a0
SHA2560ec11a08facb15aeda53e38f55d9de9a04b29c951894ba329050daf046b9697e
SHA5126d44b38126fa0e1d816dce7692eb72f90ff6d8f015902a4e848b057634077aee77d20520af0dd29a2200eac5995270f3bdcd151757e9c41fd9acaeaaffd401f6
-
Filesize
2.1MB
MD52c246964dcc92aaaaa0770c6fd7df3f2
SHA1a41a8d9b37cf2f6631bd60921f394f1204918f96
SHA2562866f848a4ab6ec4a099883ce59f79db5418a1558a0b4839c95fddcb1eb711a2
SHA5129f79296c66079b5d61521249c3ac83dd40dfaaeb39a5997f6d75e4797d2a17c2ede9933d0c2735c1414d96388eaa1121bab0865bd9203e542c5c3880a081b7c5
-
Filesize
612B
MD56676bf98ab21d4c3f9099fc79dd5e86a
SHA12538f781a39f34962644f058ec4a2fcbee06d467
SHA2561e74b34789891d54733b2b31032ed6415c4fa05960c2b033b9aad3c5b174ecd4
SHA512a583529f8947aa8c7bac3e1eaace6ac7241e16972b18c5c54fe095e1e042516dd14387f0bca1a1ab453b03d47a5ee3e391f7ede9b92ef94ed99116c39bbd30bb
-
Filesize
908B
MD5e22cb0b31338424b35b59cec09790524
SHA1305c6c48ad8919024eac97c32aa795a9320bcf83
SHA2567d39db1515eed28a0f8e21cfffab4f82b493054dea3fd3c85291ce0e7fd487a5
SHA512ad582f1f4c5b7d7dd5550a42410ac69e9170447a5caeaed61856cee159b2b39afe147f7f6f78b2f4f548f3b448b712026a93e26297fc81a7acff9264dbd1362e
-
Filesize
912B
MD56c2d0bba12f5e0addc8d8f20a6ff0366
SHA147a5a6447e3a5c4fbc392433ff343d04890ededa
SHA25651816c89ce0feb5662c03310e00853167ba7e8186da9def3441421c293aa3464
SHA51263db94db5d9a8faed5898f35d41d80b27b461b920808131a482492e8ddce568eedb6605e74a640dc6a344d458497fc8c37dcad4f01ee4e17abe06d6fea1ecea0
-
Filesize
1KB
MD5cb1df16bb938b9711d301c4bb31000c3
SHA1c970a16204bd6ab23bff0692c5221101ee167ad5
SHA256868a9125828fd6ba427eee46d1b6ad014d9a2d12253be745d4507ced28f5d885
SHA512f5ee8df83a3b07355568c271510aeb079a619a9b78a29daefdd104a157952bddd182f4db03b0fb43cca47de5474b738c36848069dbdc447126c21c630255beb4
-
Filesize
1KB
MD5504c38b5286779d08dda25ea5da0fb5c
SHA17f85362e47b95bb6769a092c31905800920b8e21
SHA256c51cdf0b2983be52c8e4c0ce374726204ec2d1b8614d1cba92329b3214d207be
SHA512c392f06133d6d73f7ad3d18469dbfc2acca2b168fc0ad086eb644aa8199142de1d3169c23968b198e6ac83d342b1dec235907c0f6e8bf0b0c458286a23fd2857
-
Filesize
1KB
MD5da0cb6a615e282bd9889945ba3d461f9
SHA141c44a9ad7737a0d638260a304daecd97e5b58b1
SHA2566ed07179fcce709c8674c7e36c84b6982bee2ee7cca9e5ac85b90195b14239a0
SHA51275a004160d9a5f2ef1a1974f58f1a243740e38b37c74106c49bcee25754534a166854f7f372fcb19eaeb77d3a2815b7a2d6de4768215b616c1350156a8024170
-
Filesize
1KB
MD5d7acdf779a22ef96cbeca67881cf8645
SHA1aed16e262ba61e636b47b8d8f8f02e4b62f8d52c
SHA256c50ba0cc37f79a5c7c1173556986483518f32bd9286b9dabb68594b820b5aff7
SHA51230e4e6803ba38fd6833e98821395ae01f685648376d3090a8778554de99605771569cda031c30f2049c12cd78f5064fcb496c79aa3181a37c9b34f33f9376934
-
Filesize
512B
MD508a01ac92695b02a10f8d38f6bc727ea
SHA10d4dbe5475c5d4578a9207d1a17be170cebba084
SHA2568e20e809bce37964166084875a7f69c85b5326e05a04fa026753419f15104fc9
SHA5121b2ab124a22175668ab6c8b9efc650c15485acff382c38d1a8c4129bcf4c7742453e0c152a7be8401f21ea5f3cd78569e558cc89140791285a5b6c6d046875f1
-
Filesize
2.1MB
MD54300d3818be79158a0fcb2e86423cdc8
SHA1f972509e49cc4911b206065debaf6a70903332c0
SHA2566cf185ba872882b4b9980aa4451ab6bc0fb100c137dac8e62840b8f8a2c85675
SHA51283a27c861ccff1c0b6c4f31d7e19a0cdc16535ad55a97e30dea01758c7951bffd2051c634203d6bef9ac8b84fde601eebee0aece92ef73a46119bd0a07acfbf6
-
Filesize
612B
MD5220cc319b06f45552c56d4f3228c1dd5
SHA133787b940bf031351252b145c751e4f07e2a6023
SHA2566fd869b529ac74044c92810b7cfa69b5faf577d6b5864b5f2d73e6eae3ffbb60
SHA51255c4ae16c9322c64e88b71b98c69e61ee69c9eb11d558169607288ad1811a49075e9af0f87311a7d1fdd1abb26cc05927bff0c1ed336dd2cf7d67a9c32089522
-
Filesize
908B
MD5b586dc508a8540721ccdd84042e4ffe1
SHA181627e7ca883d2254ea90dcca6f87944997d5ded
SHA25685f2d071ca74251ee6003d4aadcaebd0c1883b3d06a7b4be4865974ff9cd0727
SHA5126c89dde67009fcccacd50ce99bbfdc6f9492f851896d7b7e479cea1291909dec57ae01f4457e1cb261420a835e8d7b740263fa8bf23874d9bd0d3c2caab00c7a
-
Filesize
912B
MD56b729d2d130af18100ebf3afc8d0532c
SHA116ee183b9b9f7643ba4b2a792ed7331cc14b2018
SHA25698d3e8704980734d6ef4b3af7346dcb459a3e004d9e0fa63699a6f62477e41a8
SHA512b5561db5417973719ffe80d119e6dd278f1962379ea800dd463ebfe943af46d2ce4add91eb26a82addbd77109fa605edb0ac1742cf30f2bf7a3aaf9b6d216a50
-
Filesize
1KB
MD5c005151f8b390647a7c01660676229ba
SHA1c0e3f3c28965d8483dd3d7fa966d5cb6f6317b8f
SHA256da4f5493dc07ae9289163f97a31a0256e33c25e91fa3ba5491f02a187c547592
SHA5122a5e63849a56a71db2b1161e6c43cdf13363766802b952b409029d6bf881aaa8f6ca64d2f1962f3d400b30ef4f160a50c3126da6ae32e26ad22a67796227f2a5
-
Filesize
1KB
MD560ee303e4b86f593ae35f7f5bf2915b7
SHA1d0a0f8e528d44ddf422dcc9b06bf9e57f08c2255
SHA256240cb5cf3f43452811df05c3ca44bc9626175761c04154307d2c67c5538291f5
SHA5122cb188cb9a8391fa7279bed5988154e0ded3ea2392714bdf2215f40ed8591939b65b4ed52ec5d7394697b728cbca48bb29081b21415e120ce2d6deab06ef512a
-
Filesize
1KB
MD5b30133496cb094872c31201583394c8f
SHA19c729febbc6610afa38cf0edb8ead923f5e2deef
SHA256708d4bfe9ef5ff45a03a691706813f32b057f87c0b160c6a23781fee6e4b6fcd
SHA51262658dccba254424e40f002d8ded4fbf159e4ee7524fb6de50240aef0dfe1476d3ea67d41d8c84f6c396eeb86d4db95d597c10290bcaf41d48f892f7fb1fe576
-
Filesize
1KB
MD51ce783793c130ad1c13c54e5ae62b807
SHA1ecee2d02cb0bcd3e8630ad9cd974dc2e0254da25
SHA25642907d4522e373357e4e6fee4945c2ed4f761b91251ab9e7ce1cce0c0fe67eb1
SHA5121549ae931e0a6c72857278eb97121c98718f675ec4c802722fa93aefb97103280112bc59f1cf58a47f9db2e5e1adb324e6972c108fea69ac5f364d1b5b77c84a
-
Filesize
5KB
MD5d4369613b827e02dccf6f597647cbf1d
SHA120a05edee6b1d543129f4d0cbf57fe7b2c5d4db0
SHA256ebbdda828dff50c92eadf086813bf9eb43df5fbc3581e4fa3fa1a87129fd8ac6
SHA512285a5bbbad021521be2f58c46e93e3d65335c2d2d09d6a7b9c4861ccd7b53cd82422a233097bbbd724d40728787472a86c6dd08023f34e16bf1ae6bf3dec67ba
-
Filesize
4KB
MD5689eb9d3d2a866648f68f76e6a8c3d46
SHA1ba65af36973bb4cb831868ec4882ce204bffb597
SHA2562a8c5af4b19e1144088ff271ec893e963a454107facb5f7155c2ec33cfa17b6a
SHA51298392c13983b1dea2b080c383bd26cae10b411360df2fe4192bef6c0958b5f6bbff98ad876d2edbd8bd771f0e8519ad9c3cc50ceff56afec569bdae864b14d83
-
Filesize
512B
MD50213bbea39d5db14fb31854b477bb390
SHA1a964a09957d5e4c75856c223bc2f7a9f0a68553a
SHA256e5e5711c6af8375ae5cd7bdc14aa1701c30f3569d78e04517a3b4350466f9b49
SHA512e07be3aa1c9a250e98baa990a082956c3bee202bdd0284199466f8f809c39f22feca2c3d75521f0d97246fec2513a061b474538fb8b304081fa5651e5fb115bb
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
2.1MB
MD519c211e10ef3ad81f2e89d8aedcf1b8a
SHA1ea65e81e497237432d1570a8349d8e6b99ed41a4
SHA256a43267119220bde3af4fd2c1bf83da045f9157a79539563f9e820b9582add55a
SHA5124761bb2e01f9569c2e6af64ffe00b6560618a2cf416e2a1535e57d1db255f0e72b950d02a11ac63c2725dc54f764e3810dd32361cc1fd20386a2a28ba8b95133
-
Filesize
908B
MD57f021799d2748a4b86781e315699f457
SHA1eb9b2e6599aec16647224267eb4e47409d4b978f
SHA2562d411e065827958a1d80643af1893a410e255c13caf9d3c39e92a96dc9291d4e
SHA512e30016fa7a3ffe42837adbb4591d5157c98c5edcdcf88fa5a9a16c794d18c6e36e0a3b975fc0850367a14ab5b69402e8d00bd3d9aecd6a5721b06c0a23ffb5df
-
Filesize
912B
MD57290f6993d7435c8dad2d245ed3b1ceb
SHA1a4e93c844e7d558c79a42b890b5b8d29bfc3260e
SHA256607945dc0a69422503152cbf8785cd13808832de2f15aeee15e30b9a4f92f588
SHA51299b92d55a799a447ee0cd3982314296568d826ae1bab619541024ca94491c6d31a20cc26a961f54a344d1beab413542198fbd0d7d74e0ccb0ea5c79d00375c3e
-
Filesize
315KB
MD54899aca36d1ed747a447dcac0d101a62
SHA132e43edc0bf3e036683ea8639472e6cd31ab9929
SHA25667a651acd867e046fb4463b31ea584c1468f7243a9d1e2efd34059e8ee2f130f
SHA51250b23dd279a9efba566c6a6523c7537723c0cd6dd3e4871f1cbdb8d5bc355caa3ddea99452b1c8e5356802f812b3768066a9848b93d715bb8bdfa455b704285f
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461