Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
8s -
max time network
146s -
platform
android_x64 -
resource
android-33-x64-arm64-20240514-en -
resource tags
-
submitted
21/05/2024, 13:52
General
-
Target
a041bc05ffa20dc6df3387818a06329b54c84ca70cb281c0358d936aee0b3858.apk
-
Size
68.9MB
-
MD5
7a5a2264a38d14ec36629301a1f97ed3
-
SHA1
9ff4d9a4fd79a6decdfc452d21f5954a90703398
-
SHA256
a041bc05ffa20dc6df3387818a06329b54c84ca70cb281c0358d936aee0b3858
-
SHA512
88bb457453d9831805199f588b24517e2f88a86fb1e0bafd3b1be3cb19b4ae115e6f42081aa723ec1653d6bfd6ea95601dc39b7893a7812f417e4b232f6843a5
-
SSDEEP
1572864:zbjAo4jkKsBxhMCb7ZMU1B+3cd9xXX0GQocKL:bcjkVhMChv1S+DfcI
Malware Config
Signatures
-
BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes
-
org.telegram.messenger.web1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Acquires the wake lock
- Checks if the internet connection is available
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD5d0c422a56975a719af72c8c5a2676625
SHA1ce764f6482de2e97eae4fd69dbb8b2607b35a67b
SHA2568d718d54f6ade26fddf3abcc3816f9cda238e6d01c080f1a8f126c2c6883ce6a
SHA512ac9d29dbc3da155c8ad77d42e477871791836851454094463aaeb0ae1ce385b51ff09d536975e70b2062a69a9c4bf310221a494e0b6bbdf17cac07285dbaaaf4
-
Filesize
512B
MD5a28c4df8ee611f8348493552ffa574b7
SHA1c8ce381d52fe5bdefca7a339d4f5fe7eea65f93b
SHA256d7236caecd7fc9df265181316d78042496159de7241f959b44e8b4ca079f5d5b
SHA512559bdcee6235b46a40c5261cffe0bb813890272f71802339decf30a54e77537b6aea597d58f0e722664926f8771ddc34e069a2fdc8f17c4b5c537f2e90a84cd3
-
Filesize
8KB
MD540088239c547b436526dca89b12e65d6
SHA19e47856eee62d870b4c7ab16ccb453b87e37faad
SHA256135d6a45bee774c46cd22cac09b4950bb2d6161af201eb188cbebaa98b9966d6
SHA51222815d22742cc5f8a1be2e9974652c578843933b6f321f9dda3b197aa1968f944566c393dbae4813f96ea8574240704d40132f90c32f85c797803f9ff176aa4b
-
Filesize
8KB
MD540af8e1ad6746ffd7deac6f40a8f0e47
SHA1e43494f32e31629a965fc7eeb70bc4fe0bf5990f
SHA25615db7f03debef9e186c63e42153154f41ed46b39d3cd6852db7eb665553cee56
SHA512460dbd71bd5285864abe8004b84773227b05dcb57ac657049047b466888166e9e4d4bd9edc13b760aebe5b65bb42e1b5720095794d46b6063a85cdb3e71298da
-
Filesize
90B
MD55aff022a4d795135c2b866c38af5622f
SHA14b4ae138a88b055746e65c07a85dd08ee22e8db2
SHA256f9f4c4a44dd4ff8c6bd6a1420e5199abed3889682280f19aa0a015d11cc50256
SHA5120d26e4d542b509257240f760cdf8d7af1ed2d987987a867f608c162fdfb5d8fca7f4c348053e2b6fadfb0b9ea74c0bf5dc4214e4f206d7a521c28628b2489d6f
-
Filesize
566B
MD5bffb2c113722f0c0d4d1affd4c2bf706
SHA19a7b89ac3d01b1011ad2e83c270ea66de7033a82
SHA25641af36da94029daaaf0ce9ce42d0d01f7e6355adee6ad67790fcc308f8dc0a40
SHA51298c61676ac2f94825364c997f6f5378706fad00bda71da71f9e331546334aca8faeb7a1c54d2868b4eb189edc15ef431994ffe08a2ac82dc90afaf7cee3d4db4
-
Filesize
4KB
MD5689eb9d3d2a866648f68f76e6a8c3d46
SHA1ba65af36973bb4cb831868ec4882ce204bffb597
SHA2562a8c5af4b19e1144088ff271ec893e963a454107facb5f7155c2ec33cfa17b6a
SHA51298392c13983b1dea2b080c383bd26cae10b411360df2fe4192bef6c0958b5f6bbff98ad876d2edbd8bd771f0e8519ad9c3cc50ceff56afec569bdae864b14d83
-
Filesize
512B
MD5599b5388420150c19ed0d792ec3db30e
SHA13f249d945517854a51f706fa3eed0cc7c3cb7421
SHA256811fc7d38e017084a18f0d77e652574567c72a90180648302577f281d255e28d
SHA512016600032bbbcddd6f72a32d5ec5276fba222e9ddd266c453cf62af5cd183bdd898c98b4fde9b37a66310f6833110763d4612314d15887a8b3d0e9b774d6d71d
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
1.7MB
MD5519461a7e58a968588d72ac6f1626ffe
SHA19dab681f1a5c910d0eb8f3be8344aea8a28fdef5
SHA25684f2987fba9bb44e04bd5dbeaa240192dd8c3a468b603471fc657282f55a169c
SHA512c768be5a52716654f58345d301802c7dfecd392e3a7581c7ee6aa27bf45638b45f0e5846670fb7d43d7e9c47fe75f2873bdf833020ce6603bdfb15006a4a894c
-
Filesize
908B
MD5d6bdaf6acd3e94c631aa0fae938537e6
SHA155cf499af7748643c49139a891e87738e333e413
SHA2562ff655d636368e0e6b59939d897252778382d0a090769efcc5f00eebab70e596
SHA512c8c4b223683116fa96cee8844dfda54d2f814c70c56280b143c252ec405e3af18e08ee373d085189ebd936a31280ab6fc837764bbdfed6cb5009226df85cae06
-
Filesize
912B
MD5e56d56641e8bf63e061a7859f37ed71c
SHA1521df01a6a742d5be9187453a41bb514a1ce1adf
SHA256f241037392a0c7538a83a1f4e66c01f3a8d9a85ac25f28096348fb49578780d5
SHA512b331605c47b25738357c009f0cab20aa64e08cf38e79b64ed95b7fcd9301608c467d18d8a99e8cafd33f0d799e113fedc665fd7179db5789d16b79f0f25514ab
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461