Analysis
-
max time kernel
47s -
max time network
132s -
platform
android_x64 -
resource
android-33-x64-arm64-20240514-en -
resource tags
-
submitted
21/05/2024, 01:32
General
-
Target
a041bc05ffa20dc6df3387818a06329b54c84ca70cb281c0358d936aee0b3858.apk
-
Size
68.9MB
-
MD5
7a5a2264a38d14ec36629301a1f97ed3
-
SHA1
9ff4d9a4fd79a6decdfc452d21f5954a90703398
-
SHA256
a041bc05ffa20dc6df3387818a06329b54c84ca70cb281c0358d936aee0b3858
-
SHA512
88bb457453d9831805199f588b24517e2f88a86fb1e0bafd3b1be3cb19b4ae115e6f42081aa723ec1653d6bfd6ea95601dc39b7893a7812f417e4b232f6843a5
-
SSDEEP
1572864:zbjAo4jkKsBxhMCb7ZMU1B+3cd9xXX0GQocKL:bcjkVhMChv1S+DfcI
Malware Config
Signatures
-
BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
-
Reads the contacts stored on the device. 1 TTPs 2 IoCs
-
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes
-
org.telegram.messenger.web1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Queries account information for other applications stored on the device
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Acquires the wake lock
- Checks if the internet connection is available
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD51bc3d76ce2a88fe33e08400dfe18444b
SHA18e7b18366095923f5194522a8cd6d355268d3a3c
SHA2565b21e38d57521d66257757e9121bc937246a012d8adf81043001656be831afd8
SHA512e3927adf0ba387364e6cb9d46479cd359d87039cde4384770698fc443ee25b4dcb676b78fad7d86655275dfb04c9148fc3e392243a3a5f0d9d290f843f460dda
-
Filesize
512B
MD50774803f1cc409f1dce75f004d8d1cd8
SHA17c79830b2705149a092c8d5cfba7eb6591183344
SHA256dca2559a86ee2e0e6333583f44cdcdf266dccbc615658b500bf54a65d9f523c8
SHA5125b2f691ba1a1d3bbb1ce0ab1f852169c1fad4bdc9cc3a57cc7d9289e11eca4fb29d32151e12c8e060784fc45ba83eefee5989771d90b1f255abf2a9a5b1d0037
-
Filesize
8KB
MD5db018ac8b1826b8d6411a501c58f0e78
SHA1f0e24c34473a26f34478788841f88d4cfddd5654
SHA2568816e59ef7d53b115192960cc6eb5d5de67aff66d7bc3c8feaae45dc2557532e
SHA5121bb8add2c149c223984fd5f660cc2cae56663e8d98ee2020e6e99b08cfe3cd0d378c358fd42bbeed3e6fd05651212b0e43ad84be96e203342730ef21fde873f0
-
Filesize
8KB
MD58057ad4a6dd3dfb21212d8ee16c9173a
SHA18a5a073b9983532e5fecee65e5ec68aeb6a87e60
SHA256d56d0bd292cf49c4881ceb5280a8693002ec980c52f8c457987ef9d1cc747c8d
SHA5122d51da74c3752917ffbda91a4490a213c13054f250a54dc02b4ae61f85ce0fa54797c25685726af4ba5290696160511c11c3b1645191da71b46719b44e95b3cb
-
Filesize
90B
MD52a76e86edc3da73550442cac62e0e909
SHA191aa1f95d91a642f20256559cbad60bcac284ff2
SHA25668575e698cca092b2b74d4ad83144c5e2144ee793640c617af0494a23cbe6d58
SHA5125577f8c8a6afc33b24cd2e9898c00da20167f34f0a1e31e16af3362e0e38046e54f0aa5e9b550888e680d803fd0e4dc30ee4c26ab1fc7c1f01c2b8f9eedae587
-
Filesize
570B
MD5ea90ff632c4e6ef46d17fc583dd8725e
SHA1c2f42561447bf9698ff7496ac1ab919593b27511
SHA2561093f90595f31440d784de606e05d1904d8cfbfb90ceecc7da2fde9a268096ba
SHA5127aa4c2b0334db8223dedac0054c03a80c5b9a6b7da2baef90b8a2544b768adb0767b02ae17f29d3b2b00c63496b090fb89a6e452bb2ed340ba536694297fefe2
-
Filesize
512B
MD531fa110f8c50b37665dc3ed80fd14958
SHA10c4ceed9da720ef389faa721c30b0f8013250ede
SHA256d4e17c9350230f2961d17489bb0e9e01de8176d02530eedad59749ef504eeffb
SHA512ed64d32d0b9895e5cbf8d8d11b329179b2905b4c2d426db71c071d83683ab56ec41622d74779647120ca41cb73dd2d63e71cadc9abd2c07933fcc7c092a65d18
-
Filesize
1.9MB
MD5e321f62d188c1b41080852fb2cd81089
SHA183264f0b6bd37c39345a11a92ef8630941226e74
SHA256bda46e8820c084ed121d1377cf5ff82e5655d090c09ae5016d8f5ee3e8e12764
SHA512c82a98791baf4223c6d0341ce2755c3724b229b7a4aa34972d301a0c24fd28ab7ee8494ebb18ba902d5aa286737e3bc984240e0eda9ce2955e40c14ba5d51ac9
-
Filesize
40B
MD5098b011c59a80daf15c048dfee00ff1f
SHA147963ffe950f64e4ab0d329f111f1ea61e1f72c6
SHA25687152114f80cd6a1b36e7649f2e54e18e347d15b45ca4245e1b2f20922a8f037
SHA5122caea2577cd87ab62be62621d976c650f14f063b6ef815d23f218b35b17354c95f2a56d595fce876750fcbb47ddbdfa844812e1218d77aa5249d85dd349e16c4
-
Filesize
612B
MD51cbb3b5d2802ec5c981eaf7b22769ea0
SHA1eb0d636870e82cab68533e8dbf6b96e6bf9d0f4a
SHA256859dee7a0014ec70974f8c3fcd628b0d453a3e80031cfa2958055ca6cadcb01d
SHA5126f798753d42f231995c9fb9fc0c5a84e38fd26651d1d7ed26f0f0a8e461962048cb08a5ad573d1177b631bf179a5d7e4823394d2e9f315c366adb3ea972efbf2
-
Filesize
908B
MD57857bf85190c7016fc3f23e18a2d8cfd
SHA112bc8cc3b75c43ed6cf834d9eec21ba17545846e
SHA2565c16c961c62a03d6005c002eeef8b858fe1e3eca60bf1ebf65d7c088021aa8cd
SHA512e08ea36e6ffcc012e5dcde28bc0aba7110d18a62e432a064973f1751c6bc6823a051186a6c5fed5d853fa32e83970dd586147705a674c235417b2e17fde4760f
-
Filesize
912B
MD5c85efed903fd48e852143337b34594e2
SHA13a5658c5f66c414f59e8c4add8e66418869abf4a
SHA25630e15231748d19949a116156fea04830e72913657b998da38b189c77c32811cb
SHA512b195dea723d1e7ad6860ac49f7dd72030c6c4b0556834947ec046406978c432aa4f117ee540c65741ceb18b50f07f90b8c2257147bfc6996560166358c74a4cd
-
Filesize
1KB
MD5074b138c14451d595ca6a54ea0c0e481
SHA10fde6ce3fcabbb9a4df861ed5e573e299b8f9783
SHA2561e844cb41d2338ece4321f7dbfe1913cf9429e7013d7316d6e9e660d5fd97a5a
SHA512de3216afad22861476578a1d264bb1a713d64a6db9ad9e855403bb862a08a04745ff96d1bab18f04eee0dc01561cebbb06e4e9329dc77989a8d2626db433c7d5
-
Filesize
1KB
MD5033ca8d350e213277be417ff4acb2e27
SHA13c506788c1c5db081fe91d783fe0276ed08218e6
SHA256dae15aee5efa2d3d0ca4d0955e055d7830ef40a53f9f8d29c61300579241d9f7
SHA512d76c57cebabb5d53bd9d2a086ab6b6f704e52d2df59954930a5a81fc63bf8de3ab0494c8ec4f21a8da9f06f79d47177839eee56ab377d568d5f43aab4d876568
-
Filesize
1KB
MD5a12f24954bc15d947e490241c6960eea
SHA17a127a9caef487ef3a87c5c2ac10c0bdcad3b2a8
SHA2568a7fd53b5cecd10c434f43dedace270a4168e098180d663f12c75c253a12cee1
SHA512a0a4147431ebb919663fb2cec978a72f2ab1875c33febf1ed3b56f497e1c1ddd97442f0e2b07f822a1046e0586f340f54ba99181c070f82276185aae18df2b98
-
Filesize
1KB
MD5a609551de2f3b85a881111c3b892b11d
SHA1e7460e579c4a3a2f303342a6fc5ee2c9734c77ef
SHA256462f38484a8914903ef8ca73f2692b107e6db11cd4a1a69244c78c320edbe426
SHA512fd5dc3595821a4ef54601cb1666f651b20e9bb18c2827744825b2508d42ce2df8af76a14be0891253ea8dc2396e91370f223a0dde26db89ea2f2280f3845469b
-
Filesize
512B
MD515376790278461858ee11151f5b29e1f
SHA177a4461302ca2817027d68613462ec8c3b9934ec
SHA2562e1b74e0d3882fe6fd7a30e4ef6443b952beb68c8dfb88c4fc2685dfdbda2750
SHA51243b07d7b5482b8e22cf13edf0fb9ad2f959cf15c21c0a2747bab043aaa13791dd5724a7ebefe906650e9aad777e726424be3b7a7d7edba6fbcbfe8063d56951d
-
Filesize
1.9MB
MD529594088bf780c056ee6a4faccd3f4ce
SHA1318b99596fa31853c9dbe52fd64a63bfb985c949
SHA25622d61a49159edc78e2c58c662b608058ce57f7130bdc8b6ddb2b6e8b9b52af9b
SHA5122f4bfd4d76cb92a4cc956573ed85d40213ebf9bd1f30e408671745d45b426a4293124030ae2b54889e8c51a4e3e03b26240cbcb1993337c2c25c5d99c578c53a
-
Filesize
612B
MD5157013eec58aca35173ce07e912cfb75
SHA1feee6612d7dfd2bb6e05bded1634830993c180f1
SHA25632463e9231dd8c4d229f5774b9e57eedd9809d53482921e9376cd28787bb1821
SHA512cf2f338a65c3da6bb47c4b5884e6aec9e5133a112cdf038dc3a65103f4d01a3bbb3bf41dbc20d313a997258904af6730c24b111fbd9eb7b5c45761e5cf04b176
-
Filesize
908B
MD5503bb4d473bbf1c4f99d045e25db668c
SHA1f0d4bd40662d8f6407bf83639517518c25212338
SHA256c65f5b988504cc7f3399f42ce6341e7ed90381cfdfccdd306b8ff0cb9024f094
SHA512d35e2afb7358513d2ccf1c5f3d8ddc6c47dfedfd75566efa4aa4a8e9711e6147678d4280e2695cfb2d31bb0f65b7203121033dc9eacc0b857ee5d12502eaaf8d
-
Filesize
912B
MD59c40219a16dfc7441b5006d46a21de1e
SHA1809cb2535aa7d3b22c14abf6d454165e443f3fe3
SHA2566f9177a8a623c0699f69224aac008780304766f06f63bf3e1c338d75aa5cf755
SHA5126f3c432a93c98984bc1a3e8e679134a59556a10ff59363f46295ef3697bbf10b93444fbfb629be9ae3ee0b5be8d4374efb0f02b158d30015ee6327352a27e002
-
Filesize
1KB
MD50e06268c8f627ba26d71c9508d9ec0d3
SHA1e079a51e5cb7c4e350a12dff1e61bc3a0cbf349f
SHA25610e16d9a8b4813273420eec0a3034ce60d566a44d05905bfb00f7262305a42fe
SHA51203951c7c89ce44bb445aeb0a264a3068cbd1a0f35b6e15866aa3e8fc41ff176066a3c65c77100a5f3a3ff024d064a478b8792cbe65625fca54122f35250f27d2
-
Filesize
1KB
MD58b10cceefe8cf456dc78e7e4f9d2bb89
SHA131145792d129a80543bb2a50f07075292d4fa1d7
SHA25646135fb972cbb8f4d0d3dec59faa29db27adcc8770d8f64c9e72673cf8699819
SHA5126bd0a143a93ecef84e55fdc1f8baf36695029573176b5d21fbee52e931f840372452c7bd2e69612023ee71a2de1e54ad98e1ef7705d7da83a363e876299d346d
-
Filesize
1KB
MD57174f785b8260f82d1704c5d9112e12e
SHA1dbff01886e21aa51d2eab668450d3ed6feba5c10
SHA256d261f93a34f910841aa0d6d9ae87f4106ba799a33c0e7ce4629b87ab4a8c4d06
SHA512b531188b8e88f08af5fd380ff3f66a8905aa58dcc0dfab4cffab1f792995c7f7be7e3d7806a64009c62787ed3eca06131a0d0a19126b70fa40a6d71a2fdc2b8d
-
Filesize
1KB
MD52f5dd5f7cfcfb420f3f2a05d23a7c28a
SHA19ecfa3f6df5ef93d4898281ceacf7b11bb7002ae
SHA2562c310edbc89d72251491eacbb63a1ab5ce3723c1b072685e9b65b52822e6ef2c
SHA5122445f14c772def57816fc83790871ccaa376417dbcb95a3c7fbd11e27d0b16972cf6b77ee4e5a4c480c6f833c0f8cc39ef512e1a0da072e01c111c51624235f8
-
Filesize
512B
MD5901a6a8099c2f5f2ba5a2ed432016092
SHA1798916c0ba029d8696fd451c77b7e3522e8f48c3
SHA25623187e1c30c04f7093fecf471208e5f91cb3ea174838ffecf1dfd1796dae2d42
SHA5122db426fe93c16861baa9ffa2085f2cf4000eee41a816f9644fc4b55d2dc63245cc826bd055af3743ac60b8d6e7471f7b7a16d2fa4957363e0fdfa41a9f2fabe6
-
Filesize
1.9MB
MD54f7b0ddc712c52a9ebb412d82f0dccbe
SHA1e41870b2478d0c0149d8baf2a73c621d58853d96
SHA2567c8727c38d3e757f678a98d0101d01c9638972599a83767c25f17b2f8595be58
SHA512a5561f335a2de4ddf4cdcd6871f1e35713851ba46c742d760d2b0cfab124199f4f4e58d18deda477436497eca75dfe55617a2bda56edd28881a01c33da37d96f
-
Filesize
612B
MD586f5ba3780b9c580d107d49ec04a5457
SHA1ecbb589a80908e6617e3d150873a63b6b098a31a
SHA256e7853d4ddb0c905fbd2578101f2d407ff71f03e632ed94f27ea3ab70e91e6646
SHA512290b7585673c5640f6b33d391036a601dde158e472cce21ed4e85063ac04745464b1b87b24a3d769e020e98166bf242c5a0f80f18d4f4ce8da88634f882052c6
-
Filesize
908B
MD5a22c60f7a9a8ee4474f6cec5595717c6
SHA18c517784cbeadaf99222c2f0a4fd6b3d00e895a2
SHA25625f1b61da850aa300dfe1d82fbfddcf9dfa31d9914ea8328d58ae39ac9b47c05
SHA5120beccd1d669cc45bbc0b315ddfea7085a09de244b1508987eada2069aee30c124873bae23ee326464e1ada04d92b563cd24d6692acbf0fdd77a37bad6eedf2a3
-
Filesize
912B
MD5d3d1092f32486f1a2909bcc3b8394395
SHA1106b2e9213de714cc29899717e627db99f8fa984
SHA256eac40128de4e74ebe32eb46bd3e6ac755e314a34159c5e49e1a0258d6803e463
SHA51229df5dd0a912f17c97b5dc2abb559175ee594607385c52b00c94171ebcebf2a04ec58f8e6db804226a5ab3a888f96fa15698f07825c140cac9c1045cd15cb07f
-
Filesize
1KB
MD582d0db6221f09c68ce30eac671ad3c08
SHA1483002e26f87b893ee30d87bba3808e056c655a1
SHA256ea07c221c24d3f711bbe3e69ea5994f488979db268ae0b5972c9c15d25814468
SHA5129e56245bd89ce1b4ab557099fed6368e78b3fe866b1c56c00020d2b267d7d85eaadbc25cc817e0e15e254293d3a88762e9716776e4d8ce37b28e63070eff5970
-
Filesize
1KB
MD5f27228a7f2c582e5fe4ed3e090e665b8
SHA1f8ee517e89925705c34e8bab911959c8072dc3ca
SHA256d4969974981e29e949653cc0a0667c8e55db3026f6584061c6ca965e3ddebba3
SHA512aa1191af61309c9ac6071dd97920e2b531914309f282ba54e3742827793a0891829787fb30dd1ee0c5d7d5ecb7987d2bc3dc80aeec981abf4fc69825c8b7563a
-
Filesize
1KB
MD508454eb27cff6fdad58aafe3a39fb74b
SHA1535d58f4d44c0bc0f3629f1767f301994b8b69a8
SHA25628ca5dda00748a34572d33478507bfe8a9acf2756c47cf21c9671e7fa97bb5ed
SHA5120cbd95ea09b9ec11583faccf36e8300132daee14fa745f371918295621c43af286cbf2db3b7a4c345172e5c87bf738a487cee094b7954955dfadde5436d2d412
-
Filesize
1KB
MD549c1d257259bda58bf14bc2edf8a6bd2
SHA1b544e59aa5eab831c394ea997ad4a875c02a3336
SHA25625d3ef86dbc2e9b3bc145b04a00f2841ad33ec674ae5a228656c14fba5e4e70b
SHA51271ba3fbd93825a4eff5fa50a7f0a599ca67edee4bdd374f66227e0a85cc0687854893e597a442e76510d97aeb2513954152f3f8dcb066afedaca45a1fe62b52b
-
Filesize
5KB
MD59bf06cd276a81048c91bc2cb6eae76c1
SHA176ac360d39b5dad706015126484f0c0ae5da85b3
SHA2565a0501f6f3d29532ed149c92d35bbc94c5605f165ca65df03382a2907c69be85
SHA512e21e40c75f91bd8282e1aab3408ed9a960c75577d6ac8b63766f4ebbdd781e002d93d0ca85752098c86f3e4ae5228d72ea84397aa280cbc92d18575d67626165
-
Filesize
4KB
MD5689eb9d3d2a866648f68f76e6a8c3d46
SHA1ba65af36973bb4cb831868ec4882ce204bffb597
SHA2562a8c5af4b19e1144088ff271ec893e963a454107facb5f7155c2ec33cfa17b6a
SHA51298392c13983b1dea2b080c383bd26cae10b411360df2fe4192bef6c0958b5f6bbff98ad876d2edbd8bd771f0e8519ad9c3cc50ceff56afec569bdae864b14d83
-
Filesize
512B
MD56704f5eb861d33359ec42535a4566f5a
SHA1d816916030f7423db2853e3e2c1e44467928a886
SHA25607164e18701a4d52daab4aa93f9a693cf59c4d34c7fffa3dfbeeeb0baa691a5c
SHA5120548b0cb5f6ecdb0cc582834e41d34a3bd1453d71407ff1e23f823b3283bf4f4213ff48ff70e300ed8bd8dbdd11e3b008642b957941baea48c656cfbbfb5e7e1
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
1.9MB
MD5328aad9576ded30976e8ec5f8318b1b4
SHA1466ec945456f795fc9c5927ab47f627bc9263927
SHA2563dacb4136b0572edd0a0e9b6019f9f8f599a6f0620af765c7baffda43d42cfb0
SHA51213659f3e408d6b5ea52072e87334eed53ba43be75d21d97ea3eada970e9e67f975f635efd8e069a7732c32258541a06907a1626369dd534289a7079988b58785
-
Filesize
908B
MD50fd3189ac6c43f6af893c1bb42120477
SHA1cd5b9be72725630328a1edf99c736d53bd7c14d8
SHA256a3eee23880310dd0695bda43f21df48ee886e03a43453c87c190b5d7eb4e26e5
SHA512b58763be99f71806daa55b67cb1addd760329b1a8138bbfd820b27c2fc9bc909256be7cce1111a75ecbafba8927c1078f3c129554508bb0208fdbee38738919e
-
Filesize
912B
MD56c5d9e297fdc5f4804ff140508b0bce9
SHA1f83dc8741c17530478d223fb83ff12677e2d8da2
SHA25604353ecc38f3ec713b284e5977d5cb250c26e21a3a9a37b870418177f89f1bc6
SHA51215741340db3a16c1c5130eb209520ba89fb3e1b92697a2b4ff5df70e7473959880c2719be84cc2cd42e3b8261a5af17a9c92aa1ac536fa07d8321e601a790d6f
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461