Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
23/05/2024, 08:21
240523-j9fqsaaf6t 1023/05/2024, 08:04
240523-jyrc5sac7s 1023/05/2024, 08:00
240523-jwgqxsac2s 1023/05/2024, 07:55
240523-jskneaab4s 1023/05/2024, 07:38
240523-jgkt2ahf57 1023/05/2024, 07:31
240523-jctalshe47 1023/05/2024, 07:27
240523-jaa19ahe41 10Analysis
-
max time kernel
163s -
max time network
177s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
23/05/2024, 07:27
Behavioral task
behavioral1
Sample
Telegram.apk
Resource
android-x86-arm-20240514-en
General
-
Target
Telegram.apk
-
Size
72.7MB
-
MD5
3c1c87ec69fe57ae2aca6b24a1c819f8
-
SHA1
f4c7d1161a6fc09448bf56bb7cf27c3c11d4497d
-
SHA256
17a0d8c197feaa1dfa63d89713d30a3a02f879f39a35095343ad085be48e6b49
-
SHA512
c4ce9246fd1b62ada412b12fc03381470d6e2718dac79ce6202859ffe7e262c6b10059bd3a06330115c7ad9e476da29c68ae607b1f8e93f24b94dca271d15080
-
SSDEEP
1572864:AsI8T/iWuT4CK0EzbUqq+L0h7GldnkWd5fHYZWsKg6U40oq0wXQr25k:1bT/iBcf0Ezbzq+072SgJp6Loqt025k
Malware Config
Signatures
-
BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo org.telegram.messenger.web -
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud org.telegram.messenger.web /dev/qemu_pipe org.telegram.messenger.web -
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
description ioc Process Framework service call android.accounts.IAccountManager.getAccountsAsUser org.telegram.messenger.web -
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Reads the contacts stored on the device. 1 TTPs 2 IoCs
description ioc Process URI accessed for read content://com.android.contacts/contacts org.telegram.messenger.web URI accessed for read content://com.android.contacts/raw_contacts org.telegram.messenger.web -
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://media/external/images/media org.telegram.messenger.web -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver org.telegram.messenger.web -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock org.telegram.messenger.web -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo org.telegram.messenger.web
Processes
-
org.telegram.messenger.web1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Queries account information for other applications stored on the device
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
PID:4390
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5c6783c498eac8a87ce996994aaecb0a6
SHA1f32f6786b3760276cc1afdd291354444915236c3
SHA2567c636747b9593e3b87b9cd1e06e105997e43af32714429b3c481aff758fc5090
SHA512c96f32c27b6d7b79e8233ee587673249a9015608e6f1b4317c8462a1e8259300020e792f19e45e66d68899bb0ed5756426717c076342ce5c492d30b83d3b448a
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
68KB
MD5794bf98ea5267a5d8b181f90b448df66
SHA1d926a86d691c041e230b10794f994493bdfe7773
SHA256f5bf108b769306a31bc6514e84bbecbb3f9004abcd0acc4b3bcbed6364bc7419
SHA5128df2462ff7baddc71e0e741265f8c0b47ce2bf6bf6739bb1e2364bfe278596cae91ac96743c473ede9a0fce2d55c42eae0d6e59893f284a979ddee108bb0f80f
-
Filesize
90B
MD553f1bfd5ee6eaab817224edb9d720a9f
SHA180de0a4142c107cffc88302c18c0f7c857027adb
SHA256ee357994fdf8e915b616fff20114f703be639260a7532a1c33e61b4ce950f1a5
SHA5123144653e31c0d435b96fa5888326dba61dfb4ed4926e4175544fc1a7f16a398317002f535b43aa1e34725eb8f787431817986432ab08a4f04d77f64bee4a6b52
-
Filesize
568B
MD59480cf186caeb2f5c36e7446112041a9
SHA1b93e06a55999d4d027d2ed09ee1169a2c30b68bf
SHA2564191aadb4491fec039080080d51114dcac3f2b187301757488e3fd7df978e756
SHA5127146246e97397a2e572c4e1a143f5985b420bd0fd019df1a3a6ab3fa2654a91c29022aafdac62c0b07fbb9d8873b07b0bc7b3cb41671cfbbbf46f5e0b6a3d0c2
-
Filesize
512B
MD599e6b9dd656c53fcfb016b952e26220a
SHA1063eafc942834f40f4651b2efe6b3cd9a546ffba
SHA256720a92d06a00d8bec6166579d8bdd56c409af8f5de92279d7aa36e1669099db2
SHA512f797244d37e66c070344807dae41965d91daf97452e7f008d4a9875c088c6725ebca0ec7647395bf88e13c7717bd36be9eed1d548eeace5f48ac1b9a5763449d
-
Filesize
2.1MB
MD589f8e863a825b7bc7a41003025b66bf7
SHA138eb62c51b8e8d07035d091d30b65d71a797b23b
SHA256e0129d3c2822fc42f9cf9d6a9277fd4a73d803e5ec492f25317fd9edda5d1415
SHA51275cbcd6f29b80343a734a6d38298c5428849bcb34ab89706501280695879264358e1dc46bb079438325e0cd873c952df82a74c0300a5f6c7ded23e3d9bf40535
-
Filesize
40B
MD5098b011c59a80daf15c048dfee00ff1f
SHA147963ffe950f64e4ab0d329f111f1ea61e1f72c6
SHA25687152114f80cd6a1b36e7649f2e54e18e347d15b45ca4245e1b2f20922a8f037
SHA5122caea2577cd87ab62be62621d976c650f14f063b6ef815d23f218b35b17354c95f2a56d595fce876750fcbb47ddbdfa844812e1218d77aa5249d85dd349e16c4
-
Filesize
612B
MD5c0e0ef08fe6310f5e88f989b2dc313db
SHA1245536c25e4b110293f8c1f6514c4951431b2d0e
SHA256e7fc35161488500c4fe7271cd072dac7b96fd69ee5bf3e459f08c0f0bb776598
SHA51246d5285fc66c6a5d74a6c519e9310ac9f9af343d49ce45d74342819871c7522eab553d14036ba1ba56698075ced3d481f44d35a701a207290dc547d4e812fb19
-
Filesize
908B
MD5014de61c4832c53214de8bd96634c36c
SHA16e2ee0448566a00671a43c85305a04c98124d35c
SHA2561e963ee3a6c94389f5be1cd6cfa1372245fe2728b6509d6a805ae47eb1e7d370
SHA512e7138f5b854635b08e85644ef550df77a57f37400a32d8f76cf2697caa40d48a09634b7d1cccb21e83d16bc2a2e0319051fb95ad048554b416893713ff116df1
-
Filesize
912B
MD56fa48b02723836cca11d6e57818f6919
SHA157f283097f4fcafbbe5aae2743493f4eb7877ae9
SHA256cec28be88dee03d093520e24547acf9ddec2fbd37da378ae8f76ad6e4b11fdfa
SHA512ad40e9a686e7bcb6e9f11d4a0278e4b45d4295d93b6d7f78a0dccf0d31861c1b0ef93fcba1bf07ee6e12ad61b5035fdce121257c9208294c88ba2e1af5ce4595
-
Filesize
1KB
MD5b0ba8aa7dfc8405e8c69bf3e618a1f92
SHA1aada30d6c8c59618cf654d2b34afc0ff15eed050
SHA2568a8a26f0517ec8064fcca332ce1fc99af905b2652d2502d00e2a5e2b97908460
SHA51271febe19449b0b15a78a27ea8cfb15b1f83caec76d059c4654cb5c691778ec4acb3ae908e3237278ff077d20eda88bda70d5b9224b3ef9626c20badd902f65aa
-
Filesize
1KB
MD5878e022e2f803a8eb6492babc73d0202
SHA19c1be7324764b33dbd0c126b8b8f15d002444cfa
SHA256208c46bb38edbf562d0897ea3ffe60fa1aa212c6ef92200104981ed22d3a6068
SHA51242bf89802ad135fbc78458e1ac5998d0a390a11e3f4b23e20f8b57e94ad5c68d9c7b117fc5a66b7c8505d6002b0355b87af457f3b158431cd8a197d1dadc1374
-
Filesize
1KB
MD5ecc249600a63cd716f2ea3a9ee38585f
SHA1f99b58fa731bf543f9938047cecd12c44ae16800
SHA2565804f2f6b710de1c33cbf40aba936ccf1f7b0b16cd39291409d4a33efe9a2da5
SHA512c8cd2c91a8fbb4f0200e6a1c085272b0f5cc202c1e88d960f1af29beb93ea3aad8458caaa0fc80ad5c5d1d4b4744d96ba0450cff22d27f02883de13ced252ef1
-
Filesize
1KB
MD50598c983147fb5e0b16583fc753d8c43
SHA1a9be63571f7ab35cbcc7a1c7f1d88637c515f0d2
SHA2561ae96fce083e74e92b864263de42432f9a389909921b9c5ac867d1aff23bf098
SHA51202d39c53ed6602eaafd6184f24d1bdfc0df2649bb108437e565dc49ef5ac23a1fc17f62f7fa42801a1b9f7a5ebe9ef5ed9e12cb3c06d5b3f7c1534bdc5670700
-
Filesize
512B
MD5696a50e85fb4eb2da005deb487f18526
SHA1b5d980c7e6ab8248cc7e01a2ccd048f10c0053e0
SHA25626da4708b48ec665d157259e5b867feeb6eb5428cb029daf245517e2aa4a157d
SHA5123ce98c7da8dad448481783158997cb19338eb87c7d6a6204ce15c2e09713f3c956af9e3180eb92734bf5ae5791026e0516ed43deb044c1313170e9d54bfd7ace
-
Filesize
2.1MB
MD51f9c2891e30f76f8e362ac92078ffff1
SHA1e0e7a4d48f66de6ef1e6c8a9d57b4be62efc839f
SHA2569ab085b315c3f60255b0109907fb8c8e2c1a79d8d2c7cec679c592e7fa942762
SHA5127105cda5c95bb698480293af58a63d4e8ade8ddfff225a403051e085106997979a61baf26b99fd4277431561abdb4210b5c24bfddd57964c43d3041019b4abab
-
Filesize
612B
MD58d9991f63d0c0b303ec16d4a37dc624e
SHA1ac636a755fe808384d9af5d3e1cf779b33a16966
SHA2568ed4d0d810fb70142b55faa513bf19e92e4ea54990bcfc4dd3ac12431c7c78f3
SHA5128526e4262ab2f7b75919f338a9b453f0c0f5449e5d68effee41a259029f5cab815705d09eaa30f15881851fd5f3985ebb16462809695b9e092ad67fb035ab15c
-
Filesize
908B
MD53114d8ffacce93f42753b33115c19a58
SHA148a74ddfbdceeb0185621816c53ee9103bc2aa62
SHA256e17d5ccac477be928efbb0a584373a36223d8271b2fac06d9b933e9df1492d84
SHA5122719485ba5abace23a944185651a7474d2e195ce7565bda4739a5079bc3a86160bcbaf0f02bb0e0558ca2ef3b3b7d5e102e077a7ed773b55eae429eca34b5c63
-
Filesize
912B
MD5d3e75054191e2a2f5f4c2235e3927b98
SHA1903c531cda88961901bd0eeb69075b5cb1504d1a
SHA2567d3c9de2a912ba7abad5ba2126f995c4ff8ea2a6a41318711de76d811acbf7e5
SHA51276adf85d8122a9272fadca7862d0cca477f851da0bf337aaa536c2d2d21ffe47bcf51ee26eeda0f287e2433205b4a9c1f31b3f8fb05656338302a6257e43aaad
-
Filesize
1KB
MD59cfc480af9730a0a01baefdfd2cd4086
SHA134f641daa4f1158ced5e4c7c9d25f8e30343dd40
SHA2562925692f1b9b2418f6d4169d7a691e50e776c2f05e0b94db14b0f764702d7d5f
SHA512e1620189201f3840beda44a1a9e1b59bf3749f2776c3aaef635ee6a6d7c4bc92c5e07bb3c7b893477b1a53418140ebdecbe05040e48a0f7897af3abbf1690972
-
Filesize
1KB
MD552b7c1e225fdd1a4279a3a866b2ff46a
SHA15294d1d5590a3cc6b9edcf03b21b950e896ecbd6
SHA256a22555f88c7e77e0096d29ec45751eaee20b2af6f39b0748341f91bb8ec16d12
SHA512609dea2f4584877489a1e1ed1dec72882f80ef2057f2bbda611d635214c54f00c4a30bb55878c1b68ef5a0334ca931bbcc19fda5c242a7759247a6c50165436f
-
Filesize
1KB
MD5b872f64e7553af59d6a6a14062a568ff
SHA15427a6c4ad67a080192c4a75389c817abcf84941
SHA2569da8883e2a01c3261a61cc04b79eb82d444ead4f648c85b762805174c10d004f
SHA5124381209fa22e858e934adaf6a611579782692f82e1f98b290d985de6125ff726bbb1d9511a83650e7c88dc90595421d6304fde1a4cffd63692f0d4bceddc9427
-
Filesize
1KB
MD51e0d2cec0e63dfc4b15c23795ae0e73a
SHA1bc63f18702b2601bee769eb64a6ffeb8325b8f28
SHA2564d5b0a3a17ac6da020569944ee5fafc14fc52d3f994b52e0171b75f47ec2e2ef
SHA5125f35811d5b2bc8f2c57ac4d186b340ef20af90886095c6d06434cabd72c036c031b23faa4d5e1fd70918ec11cf64f5a19d4d2f6d3c8e025f3b7512653e2cb80a
-
Filesize
512B
MD56d8d19accb316a269dd1733ab7f8b7be
SHA1661ae5bc48351b48c6de2a5b4f8aaabd6f40e0b8
SHA25635676faac9529850781143a868b2bbfb5906c6f9b61da4a41b898c93160032fc
SHA512ed7792111bb589a94b8a113298ed2ebf7d97171edd10d0f4b46ec5753b91f13267bfbb5cdb37358aa9369a12e64f4679e32623a2baae9894bd794543e20d45f0
-
Filesize
2.1MB
MD55ebf30941c3fb518b6ce1640552fe696
SHA136064819c4b825adeb730b8c1035f83e6b3d5f9f
SHA256ce51dc45e9fa937f2b46a93ef1069a5a3980db38df5050b109552d0e3367d842
SHA512e63b0d05aa1c33099178d48bf44ad231342d0f4c601e64518cfd1ec249716fe99edee8fe89a6422f9f84399093395fa8c13403af654d2d37448cfe069d1acdc2
-
Filesize
612B
MD51c7b2fefe8a1fb8d8bb8f79f6d850cb0
SHA112f4976bcfc49cab8316b4c64f36d4dc005c8550
SHA2566e72d8bc101d4ad4756b1b79c7fd9a460c2792e3d27a2e09e2b4a94e80648b06
SHA5122629c64a95cf3e9b1b5d9514e7f42266eaca43a4fbc03505caa96404aaf6d4ec7adc1ad33ad7deb5660de2b50a669c880d24fa732245f175011d54c077b662e2
-
Filesize
908B
MD54786ec5f86380ab816a9d837d5ba79e6
SHA1041ceb927783018e317d875d585b348bc1db0375
SHA2560d5b25dc856779ebe092fe4642cbd5aae47a099fb1b7ff6aac54a94108800bfd
SHA512a817aa3eb543c6607c6c264abbf78628ef7397f585365e28f135769d305edd09f06c27b4c7a943571563e3acec6cfec73beacc339c7b305ebda93556834e2f96
-
Filesize
912B
MD59640ee187f050bb52c49db9774781236
SHA12bc909892c0904d7108d18e07c90ee504999b715
SHA2568460ce4bb88dd32b2d201e75468e3f8c6c5581608ae9eb671f5f6200ee10718b
SHA51269e7f2e46032229c600a0b14152cfd9a9eb03fd089690c54fb29c161a589023ab89996d40847b45efe8d7daca49e50ea1bfc8d87f347c7de19e8e70d003a361e
-
Filesize
1KB
MD5d4519ba22cc644c35a562c1cc4b33b34
SHA1eed7b73023114aa8c692084e7c2d3665d2f6bcbb
SHA25666c3caaa0ff7a73b1ee1c1ac76dc9ec3a52ba66ea7b98ac47a2e10c67c1d19ad
SHA5126b995d6be85ee94d501a1ff35d859b1345cd9a35303764e77684952ed682d34212ffb12e9f13285f793e3ad47c33f56d9d7fb3840737026eecd83dcbc4cabff2
-
Filesize
1KB
MD58499d083b826812aced7e12e6cb50544
SHA1ec4ccb7407e336c679fbc53ea0726f6a9dcfe906
SHA2569cdb33d1754982988a80c6233fc0b8dd80965d8e9a7630bbb28d798c5c220750
SHA512f160ffb14fcca2a714520caddbb0b63624dbf359ea2a89cb75d186a5ad2fe1904851abfbd73c3ad44097360ab7e0894f55b48091c6152742c382b5c7d9af7814
-
Filesize
1KB
MD5f9786010d2eac14d04d63608e25eef11
SHA19c1498e1fbc8f8c8d99123e0529633ec871f7575
SHA2565ceb790ab0b668916ee592a57488b35bb56dd4cb5a8b85dd6f022185f52fbe74
SHA512b76be8267836c4d3739650669380e13e3a8c09314e838057fcd723353e1534ac2db9a62befecf1099e9b0bcae2517959d89b7d0fdd7ac06210006cbafa712396
-
Filesize
5KB
MD5d4369613b827e02dccf6f597647cbf1d
SHA120a05edee6b1d543129f4d0cbf57fe7b2c5d4db0
SHA256ebbdda828dff50c92eadf086813bf9eb43df5fbc3581e4fa3fa1a87129fd8ac6
SHA512285a5bbbad021521be2f58c46e93e3d65335c2d2d09d6a7b9c4861ccd7b53cd82422a233097bbbd724d40728787472a86c6dd08023f34e16bf1ae6bf3dec67ba
-
Filesize
4KB
MD5689eb9d3d2a866648f68f76e6a8c3d46
SHA1ba65af36973bb4cb831868ec4882ce204bffb597
SHA2562a8c5af4b19e1144088ff271ec893e963a454107facb5f7155c2ec33cfa17b6a
SHA51298392c13983b1dea2b080c383bd26cae10b411360df2fe4192bef6c0958b5f6bbff98ad876d2edbd8bd771f0e8519ad9c3cc50ceff56afec569bdae864b14d83
-
Filesize
512B
MD5c3b3ddd077bbec5321027221aa634cef
SHA11291ce2fb199c66aea150f52b46fc409b4c1f54c
SHA256bff6ef3d6109e643c780386c49f3c20f26a50b8196bc14b1334c0d4ef8ec1518
SHA5124b329a47e21040e5551743ceb5b1ba30a29edc4576c68320e5a9f372a47ee526f7df83609d403935c8ba1317a9506b106733e33440897cc23df3bf49b5c77d5e
-
Filesize
2.1MB
MD5461c6d277fbccea563d578c318264747
SHA163ac289003c7225cc3fba42997acadfc2d1f19db
SHA25660ddebe454399a910569f9e9eff552ebb5c7ff19f43799a42b3c7805dc98ef01
SHA512db67d462eb2b17592f7fa9d2e018f473fbe35ba184f0049de3e2aa108856a71641e2a7d7811a8e7cb64e31383b82121978caf2636d5148169e80f5d2fde5266e
-
Filesize
908B
MD514e1a4e4e23753636556c8784c80f492
SHA1a4d9ff89d70f741922f55d7966879365455ff785
SHA256f9f06d26897c660c55f1f145cbb54b6af01720aa3e5893c68cb50b3e5b032883
SHA512cde35a1d72e18c6650dae512ea98e04f44109439212eeeed19b06bf2d80fd4968f2ef663e47c1ce2ecf88487904800086c1c009235d44d4b8ba756c6c446fb89
-
Filesize
912B
MD58a0411c84a577cf0cb9712f5202cabfe
SHA1fadaa0910364137aafb5cef40cfb11298f4d6d46
SHA256f90ee00b8696cd05f1f5d9cb7988853bf70c5bb7d8b6a344725cb97e40473742
SHA51292488a77530c61fb13209e828569d587cce25366906f2a13e78e7c43903239a447e02592f821a9041e854b507b89f2e07f395ee25c8e02a29b6da77e320d7478
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461