Analysis
-
max time kernel
47s -
max time network
153s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
21/05/2024, 01:32
General
-
Target
a041bc05ffa20dc6df3387818a06329b54c84ca70cb281c0358d936aee0b3858.apk
-
Size
68.9MB
-
MD5
7a5a2264a38d14ec36629301a1f97ed3
-
SHA1
9ff4d9a4fd79a6decdfc452d21f5954a90703398
-
SHA256
a041bc05ffa20dc6df3387818a06329b54c84ca70cb281c0358d936aee0b3858
-
SHA512
88bb457453d9831805199f588b24517e2f88a86fb1e0bafd3b1be3cb19b4ae115e6f42081aa723ec1653d6bfd6ea95601dc39b7893a7812f417e4b232f6843a5
-
SSDEEP
1572864:zbjAo4jkKsBxhMCb7ZMU1B+3cd9xXX0GQocKL:bcjkVhMChv1S+DfcI
Malware Config
Signatures
-
BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
-
Reads the contacts stored on the device. 1 TTPs 2 IoCs
-
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes
-
org.telegram.messenger.web1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Queries account information for other applications stored on the device
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5522481a0a2b747f774d21dca420f5b86
SHA16032dc6e95e7c89e39204968ee9cba3a83dceb8c
SHA2563e386d8521dc3c2db8bdc10c877202496ac69d5b718d9ee750f6d0d2c00d2f65
SHA5125b09ed9f4a5e26bcd0265cc25e24c5a6919924d936121e86af84b5398892a21f3ff79e8755a6fb824fe6c47be497f565ba876caf42355200bf0839593a715a96
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
68KB
MD58c3410184be48576e0ff7c225648f48c
SHA1747b49378c1ac75c52917a0fa69efffd272cd75f
SHA256d89a49cf9f184e34e3cbf6215af5a9d97d949150797d1179183a782a701f38c9
SHA5124dcb916a35a8c411267622306f20603300e5fbfe05b9b36d01481646398b0e6c931d36714ba839dfd55b789da086a116599fe72db5444ea7bf824d3ea52b67a4
-
Filesize
90B
MD50aa062d117747c0105c391b71c414318
SHA1c711cb8fbe02811798df1b55e657c56c96f93755
SHA256fc000f4bb7590a35fbef4911e58b2fccd68bd1d319df3fc7b19cb1d73bb7facb
SHA51217049f4e2f49d7a3a8d5b87ec1e211f322881b0a874d47d01dad17f9c4637d9e7b3b9e9ce7a9d54f40b4e08c161a57668fb6df9d1d5014346bc55e1b1079d57f
-
Filesize
568B
MD5b803f09b64dabd291f08786faf6fd131
SHA1b10b81c97364052af7f052d7a9b59202ecb7a8b6
SHA256063484efd45d97bcad2e705ee76850ec14942c43d1bf018918a3c03036674765
SHA512109e4545bff964a7ad5e6f460cbcd527fd1fe25b7cec13b8761b563801fa99f9ebec327346d9b33d134c0187cc373c8e6486c41688eecffe09bcdcb088da09e3
-
Filesize
512B
MD584440e2f3be12bdbc383a65c46f56af2
SHA1e9b469664405694def280f1339ad503c28be42df
SHA2568bce906f9259770214865c859e20390f66fbd44bbd55752d597b2f07449176b9
SHA512af7551c0b10490dde51a19f6b725c785550b9422d536e1377c035e3caac6cec123c21409c81b568e27934441f4de874cf6ccc4b67e55a74867450ed242c9f636
-
Filesize
1.9MB
MD5d3e49cc08237127a9c134e79979ca901
SHA184a3b791ea5a30a5fb6af150af46686580db5368
SHA2569fa08d6f2cd716653fb0fa40572a4ab806a1a253cabbd4ddadc81d0071d9a352
SHA51272136b0622574f359cdd3678e31b223e21946ccf46d0ea9c370510998948a601d010f6fb90efeec92f1c10dff13d3deeae93a2bdcbf9c1e968d5350d0aac9fdf
-
Filesize
40B
MD5098b011c59a80daf15c048dfee00ff1f
SHA147963ffe950f64e4ab0d329f111f1ea61e1f72c6
SHA25687152114f80cd6a1b36e7649f2e54e18e347d15b45ca4245e1b2f20922a8f037
SHA5122caea2577cd87ab62be62621d976c650f14f063b6ef815d23f218b35b17354c95f2a56d595fce876750fcbb47ddbdfa844812e1218d77aa5249d85dd349e16c4
-
Filesize
612B
MD5c583f92753724937c3211f6a0a0c1766
SHA19df2613be2d2e86892c17e4034f2d1cfab55dc28
SHA256ebfdf6ec7f2746f0a0f7f5550d23d4497d2e9a5e9d960eabb3dbc536e105d258
SHA51269b4f870d9eb392908194ae820b411e2fd59d68c629b191fd73ed5284c5e46f1f8f4d9252eb0a9b7705ef16ffb4975ec8ff562edb0fbb2554dd13fe055709499
-
Filesize
908B
MD570d30348878f6504901e06ec332f5cc0
SHA104336271ed01b2781160b134fe57df837659cd96
SHA256253eaaee3f7e25b8f1d8d2e67ee73faa5b4df5cee3252829fe80109398ad94d7
SHA512a30d1e8cbb28c4fb7f20686bc1878d76c980288ed0a96f6fa229253e2a2bb19622618e1493b0a18856e92b76f8334ebbcab730dab555ce8f894ce8e9e62b72c4
-
Filesize
912B
MD5af85d1ee178acef92233f8e5754f873e
SHA1934e2ac24c02224a24ac4baad8dae729ec340e72
SHA256a9674e1ff7dd92f525d1a84556531ec6a822ca3e03b4e87a5a748d4a5daf5d11
SHA51255f95e625e036b7895bf08044588a73eed2598cc37f44be16b86fdb2e2cd1fce764ba2d440242205790fa7281d2d74b43fe0ed924e8c84a9a4e47dad396c3da4
-
Filesize
1KB
MD5e4606043101b42087c0de51055e8c19d
SHA1a49d5f2d192ff5a3964702ee585d956871ae7d8d
SHA25645e4524d4c1b1e1493c3d033deac3c49fc78818bae0fa8678ea83b02fe2e1d83
SHA51238871acf709742a935de5be0676315eafa1cf2af56da72387bb62270f623aa4e95802560cc171ec4828f9a68450f63f72401d216cf18f27b14d43149018284a2
-
Filesize
1KB
MD558493b4fd57b62bfc181a8d592d2c893
SHA19a21c8fad02dcbff92539724303472e59bc54130
SHA256cfe5c6f06b5f00937c3bca48adf66c820eb6bccd1f04239a575f3345b017f956
SHA5121cc1d6804bf51a94f3e760963327a16572bd4ab579a2dce367e21d4996e49b358872ee5e24acbc4955354d999e88a5903a98c317227fe920d3350460cf2dfcd1
-
Filesize
1KB
MD5c3715efd4ae1db4eac3dfdbaa161e7ce
SHA13e76eee2897b1dcc9cadd6276d5507e60884458e
SHA2564ecb2deda00993d8b9be0d296c60fe5f25aa9a4cc0afe03854f65601f301988f
SHA512e7817b04b2f60cf25fe4de8ea58b70c172790c262c191c7ade64121c25ceeed41c3cfda6cdd9ea15fadee1b80f57f0ec24e81fb4e053d7e3272f615b7d76c514
-
Filesize
1KB
MD534481a8d9d9236b35b09dba31851aa5b
SHA1522eea73d9ec3b3cda4e3f8817f8d6c64b54d872
SHA256937e18b9673422fbaab53c1a5b3a1b8aebf1c5f1b2795f1fd43359fae3c356c7
SHA512cc84d1a27b543e662f7b33e7f0cf4fb84ccc11d1911fb6cf02ad48abfdb7f66fce48c72c8514e885c6943946f8b08291768e0418b330d0324a2a982fea4e7db6
-
Filesize
512B
MD5a0f5b7ee34f2196fef18b3393d87f433
SHA1bff4fabc11ca61e4251dbae8ce163a12f443bffd
SHA256eb887baeb625d65974eca330723f6733c025c2b564b00f89972abf124dc2fb8e
SHA5124aeb8da31a3e1afef5986cfbcd5dbfeb3fb4578e18bbb8008ee2783e59794594f439aaa84a73a437435a1e918eb06e01329b8a543069ce434f8818f7d0990e00
-
Filesize
1.9MB
MD59d7a0597fc174f77801563450aaf0085
SHA14357a48ee43f7dff0dc98163ca111324f0cddd2f
SHA256fbeb076e89f0fe4ef9877ac4484c0dc59f007a057554d347dcaa6a92f4b5eda6
SHA512cb0e82b0e32c49812b42cb686683941f129211dafe6647cf7bd6a245ef1fb2213fcd53f3b8126b876f4c3e7b04f2d3d4ebe9721dace8fc63d790d9a43339e641
-
Filesize
612B
MD5541df6a0811333ba6445139672b57e39
SHA123f9315fe979ebcc46e81994a87e2bd8d6473acb
SHA25695be924d8c007ec5031b95e7b1a89a1fc43129e111b7a9baa0e372405fd0f142
SHA512d5f38a1880f17f79afc5016c4629ad056167c39d77e1b527864a62be05577064f8325d239d5c392ff7a9f258ec87cec3fe40ceee4bda68e09e224906f6672c0b
-
Filesize
908B
MD5ff352f6c8a62a26a3bdf5140bf63e577
SHA179f53a76ca6dcff9fc2030546d98c4b6e606f93b
SHA256e31a91c30c01e2d349f11649e3421e76c699b6ad32c31ab629a4c29415905fba
SHA512c0cd97281e26faa53655e6350213186a2a9ac4ce0f1570413ff1557a5bdee97a7965bd56420e49f4d20dbe55ddb801c054f30425f806721b5b45bb0d10d69b5b
-
Filesize
912B
MD5c63947c5fe2e6462cfc7da3f7a0b2b01
SHA109bd25a3301711331c79fe89cf166645368f6ccd
SHA256780d1419b645115eaf2a61d367b9ca17afe32fb5ac1b34a6486513e637ae36ff
SHA512ce6b5a8f9e009a049172f3e84da0358fad88cabda5dbae97cb82b0c5e3e62ac11820c76235ca4624a70ec421bb995007eb57813646e2371a8941c2ca4ef7fe0b
-
Filesize
1KB
MD57a7bb4c8e801016c3668a476bd10657b
SHA1a7fc0ea97517bd1a0f648a41cefe4d090a7f0b0c
SHA256590ccff838e4364b94ec4a1374763cc269263a27f3afd8338c7d8d52ffc10a60
SHA51262d90a366afb718bb46d2c0b0f5a0520a2ee39f3c293b841c92043ce38d1bbb662b69cd086f0345e5b61ae491e93c8732cc6dcb60ea3b4185c3c1b691a0f4d59
-
Filesize
1KB
MD59f37e4cc91c2e44387583b7bbf76ae1f
SHA121ee9c30ac51595074cec2e6e8662ae415add79d
SHA2561e42da7338e574a4b9303ba99bec5c2846973713c7006d4b30fed7e0dd7d9e92
SHA5128324ef6a436d4decc2649005c9e9b976e14e407e5741af0f3a668b56f3fa1d9664f57a69940e23d9caa487663527290504017e5c72a93cf415a4557afbe05ef0
-
Filesize
1KB
MD5d800c2359358dd2f5dbc82379d1fd9ee
SHA1fc7ddef56df929c50250ad678f4aae4f6f782a50
SHA256c51da4e73206dd2f53194b1054ef8273a0883190cbc557ee280c268febdfbba3
SHA51242104d9ad8286eea50622952c2405a2e902e758d1c320ede94fe074ffb0e40ec311b693284b0f59c4d8ea9ac5a0eac7800a55f0f990914e9e4b2dd117e53c391
-
Filesize
1KB
MD508a7847eb4e1e79798e15a1e045f91be
SHA1c3b5c22b244c1135ea7d6ac7fc12a2d41180364d
SHA256beb4d110607e6275b4153db48734f803cf527c1f36255c1dcdca8eda1da7e72e
SHA512c5850773d9733224c21e04c2336bc4c35269de3db87394c8b2eeed8882b23df82388a63f55f2cd5d5d9d156ea76a1d4b826c7630b3a22a624ee97f316f0ffb14
-
Filesize
512B
MD5a7bd2a9afa97f00bfea77d8f63111fcc
SHA12818640b80515f343ee12f96c8e83379d6f912e0
SHA2563a734231000b38358e57f53afe923c36149ce152382ccdeb973c47a588cbf82d
SHA512a9e4faad4faa2b5da410a0d5000182bc3c87c1f708f2179fc0f8dc9fe8a9c81ff5bdc240182e80367e9e20d78ff5ef447c276da70bb640aa69e1600830f9d2ea
-
Filesize
1.9MB
MD553acc0cca161912e5e45f2a8b8ab6f51
SHA147f659e9818ff3224e5a787e0412fc7bd69afedb
SHA256de9ecda9cc186a76b8f6bef31583fb130b4ce98861512c656e03655c753b4c86
SHA512359999b5be25a014333afaeb7d89f8d21b6bc61d19ec1c932bdec2fdc59c73d767df57d604d2a580ea0733d81a806655f8772362be6a531beb2cc6de7bb2f72c
-
Filesize
612B
MD5b184b4ddb66cb6f4802c8f24ec2bd4cf
SHA1969cc6a352088a0e49368d79e2759890d747766d
SHA2564cce7b49f49ef133e0fa34ceaa519a30d5e68981c28f58609c96f0caa3d8ee09
SHA5126ddd99290304f07a92dba96f4469dd859a4c5b52d42146b5e99f7d20b81940afa156ac1f098122f074c01d6c716a54ada50dd83bcf182dd43e627b5c3e9e1945
-
Filesize
908B
MD5e9365a33353757ac46a77183914fb82b
SHA17772129de8d9bbdaa8a40190851902b552d156db
SHA256bea4e42fcae48a88b95cdb6c6f7fb026699fbd8ae4b4c60e1111aed0fd9f6c62
SHA5126ded62ff67df2687338b6f61e43dd859b29a8caed92335865e086c5e678606dd7d1ac2ef0bf0f9dbe235f57c923c0f5e55925fef34e8881db23fcf3bd212fa5d
-
Filesize
912B
MD58b697485640671d1871a8cdbedeaf2bf
SHA1cbfd2537e74907164b606fe909561b98931356ed
SHA256ab2b78ddb5ef175600e70022d7c6b674b68380cce2d290037ca80dfe07a6646b
SHA51248837a072cc149cf5038df1227a12b7c8af2fb8f402d2db2e273fb5aae57dbe72b742b0a93122119ccfb9035e9e88fb6e67cbd5e3a5b3529027a627bd8bc7d98
-
Filesize
1KB
MD5871d056010a63fdee1f4b5095cd392dd
SHA1b6fd8b111b10d17ef015f42472b0fe2ae649148b
SHA256502a40bab2baa03e25356993ce3e94fc3658194f6d32c7d14f3bc80aa1c72b72
SHA51212a5af968f7f1273458f29007760654986a45e0412269eba2f5e2e943139c0efc52876425b200272d6b578fdcc563f878d21645b4d87ec735fd807920def5d2a
-
Filesize
1KB
MD552f0aacc59f1d7fd0855d159fd524965
SHA12a1c4fb7c728ba215943d05954507f59af502395
SHA256b18fec31ccbcc0443e26e7cc17e71d10097d20cbe608d901cc2f1073eef7376f
SHA512e5590f4afb264efc3c1a4d14b50749cd94b2605be05e8e6482929f85f9d24c6a5b9e0dcb1968b83c52dec576dddcf26e94b8264c6c8cd7c0c2798bc641dc86d6
-
Filesize
1KB
MD5f503b33e7b767e9fcd4272f5b4dac5c8
SHA18da333f404cc5b1d3ca093167791683f6e8514cf
SHA256f388c296e4d027bac8ff800aa65ad4b9712d846b67435c1bf04b5c4acf7df095
SHA5121a33cc734501cfb24f645c7b6a72692a029e3646fb9a966e97b0b5007991f47a75a272aecdcc2bb268bc85403aae33d25e576c5861ca87e391d32f3275e96de8
-
Filesize
5KB
MD59bf06cd276a81048c91bc2cb6eae76c1
SHA176ac360d39b5dad706015126484f0c0ae5da85b3
SHA2565a0501f6f3d29532ed149c92d35bbc94c5605f165ca65df03382a2907c69be85
SHA512e21e40c75f91bd8282e1aab3408ed9a960c75577d6ac8b63766f4ebbdd781e002d93d0ca85752098c86f3e4ae5228d72ea84397aa280cbc92d18575d67626165
-
Filesize
4KB
MD5689eb9d3d2a866648f68f76e6a8c3d46
SHA1ba65af36973bb4cb831868ec4882ce204bffb597
SHA2562a8c5af4b19e1144088ff271ec893e963a454107facb5f7155c2ec33cfa17b6a
SHA51298392c13983b1dea2b080c383bd26cae10b411360df2fe4192bef6c0958b5f6bbff98ad876d2edbd8bd771f0e8519ad9c3cc50ceff56afec569bdae864b14d83
-
Filesize
512B
MD5c2ecba1872a54a73b0e9d95d0c7614d5
SHA1e3e817b1b92f8925d77bbf90f0ce7d8e4a51394b
SHA2569ae4e11d429303ef740ac59de6cf2997332afd836e6353d5e452c803c40eebe2
SHA512a416146f72e546ed6c115c8b6d31fe8528809d1e1cf3e36b352fd05aa234e74d31772f693883c70947810b3d21423ee7c8a551d5edc75f559b0e3e89ad99964e
-
Filesize
1.9MB
MD5fcc6be16a124c95a6ffa829cfbe24e96
SHA1a1bd1b85be6564085f1c89fc80df45306166cc88
SHA256c6b9a663d840e174092ffb6c78b20f82948f8dc0c121de4e8d0f1129427fe30b
SHA512df010d8160501483e20831bc7c72f1dcc89b60f21362552259d2be8712c2418af71a4754c358075806950c6a65ced5301052f25bf6365c309dfd4af4d9de24f3
-
Filesize
908B
MD5b2aa1b78dd2c44e30e6f48c24590e487
SHA1189ae87a92b45d92d5e24f0d5aac386ff913a72d
SHA256f431019337b49daed3652424d919f244c4bb06a449daa3b31df73dab671e2f50
SHA5126685d158e25565a67cb4efa71b4aec63dc1a5676970bd328e870853cf139bd759d532c422887022701e0455f094635442a9bb787480ad560fcfed905538225c4
-
Filesize
912B
MD543e0db468904ce4d52db8f7005e23f01
SHA1f86d5a281b72e5d642f8ff9ce2d0373b385b148c
SHA256e35c5f90e5398a0e8653ae3f1d1011cafb068e8d12847cc5543329d3592e1716
SHA512d916f9cc61fe182b595af7e84b85864f577932fed22fce92c63e7567c3201756a641ab3fcf02912d84ea639e9ce26bfba3733d93e494f549909e431d91881050
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461