Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
23/05/2024, 08:21
240523-j9fqsaaf6t 1023/05/2024, 08:04
240523-jyrc5sac7s 1023/05/2024, 08:00
240523-jwgqxsac2s 1023/05/2024, 07:55
240523-jskneaab4s 1023/05/2024, 07:38
240523-jgkt2ahf57 1023/05/2024, 07:31
240523-jctalshe47 1023/05/2024, 07:27
240523-jaa19ahe41 10Analysis
-
max time kernel
597s -
max time network
1814s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
-
submitted
23/05/2024, 08:00
General
-
Target
Telegram.apk
-
Size
72.7MB
-
MD5
3c1c87ec69fe57ae2aca6b24a1c819f8
-
SHA1
f4c7d1161a6fc09448bf56bb7cf27c3c11d4497d
-
SHA256
17a0d8c197feaa1dfa63d89713d30a3a02f879f39a35095343ad085be48e6b49
-
SHA512
c4ce9246fd1b62ada412b12fc03381470d6e2718dac79ce6202859ffe7e262c6b10059bd3a06330115c7ad9e476da29c68ae607b1f8e93f24b94dca271d15080
-
SSDEEP
1572864:AsI8T/iWuT4CK0EzbUqq+L0h7GldnkWd5fHYZWsKg6U40oq0wXQr25k:1bT/iBcf0Ezbzq+072SgJp6Loqt025k
Malware Config
Signatures
-
BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
-
Reads the contacts stored on the device. 1 TTPs 1 IoCs
-
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes
-
org.telegram.messenger.web1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Queries account information for other applications stored on the device
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Acquires the wake lock
- Checks if the internet connection is available
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD50c6b9cc97b26d210dbc7286cbb16c5b3
SHA1aeba6f023e4f3c6520ee2b3884ccaf186b21004b
SHA2566af2d659207137f2a817fdffb025e98ebd1b3d53e77db58ea8cefd39e3597e34
SHA5126ad8d1a390f6a4141ba13933f84dfa9545ebeb2a829775e722e90d0393f9c4d7c57d1ebfa9296f8da65e95c559c89b55a34b608305261bf69a0e32b905d705ab
-
Filesize
512B
MD5d4f427eae9a6143da6fc1dd4186ea076
SHA1db8b3a9ad6e9d7f083cfbd216dabd179ade1e7d5
SHA256fd5a8626d0efd0c22f762eef1d879ee3399ff79bd20577ae356fadbd2829ac1d
SHA5120fe49625c6d3f1c2d7be55e3c5ae87ccec1a51b12853ea4e6a75e455e32f6abd24345e9008dba7d608438419837d8c721c8867f38f69a43f1fc493190dcdd6f9
-
Filesize
8KB
MD5276268d32c2bcf0db464e947f2b537c4
SHA1f9c2b1fcbe27a34f280f1c81b38b68a580c702fe
SHA2563ddc1d3721e16587d06bc90e6be19b77ea40cfd34804caf7e32229c7e87bcc61
SHA51273e086ec08df77a7ef93d6c92f3c21cf8a545d810e9baf5d14d95ddd3edea341bd88bc1dfae3822965b2846d7c3a6e0a77604aadb1a38689a6af769cd114b776
-
Filesize
8KB
MD56dc15f1ba4c698b122b1b45e7150b83b
SHA1f818fc1d8150b688cc656eb78541ca16a646550f
SHA2566364fcdc32f8dcf5ba8c2d1c701f6e1f20022aeec338fa095c1c17aa3fbac189
SHA512e4281cc87eaa0da623f89a8f09ddf7f5716ae44cd883692066c0c511d98d560d8c49c5734ec2e03f720aa13aa2a733e3ffcb20bfec9d7e5cb67bdcb24422d3d5
-
Filesize
90B
MD594a95aa5773d067c306cea0766257184
SHA1d5741502d64d53adb4a7b69241010dd675372260
SHA256cea1e04cd8bafd31c2f6e5f98257fa37f4035000914dda79b5bc23e6d6d3575d
SHA51245ee96b3f83791689909ae6fca66760d3e2ddc586b79e3200df9338511daaae80240defd303bb2e34d74b1d28bd5896bf36e8c89f23dad129b3365f1efbd06e0
-
Filesize
569B
MD557a8cb5bae1b5f0dcca62dc1f41cadd6
SHA15788c2f3f564579d58c02a094c310f13a0f13c36
SHA256fb8b01ab10ebe25314298b12b7186867f9fbd28127d5d1a522a3c2c9b4ce2799
SHA5129f839743c0182ff8517ccbbe85b177ba2bf16eb789332046326cb78dfbcb3710d5dc26d6749a660b43aeaac657914c84132fbb878b9619049821c77d804af850
-
Filesize
512B
MD5d49d5a742b2f46d428f13b1364ebe944
SHA12adf1b13685868e5395da971fb0f234095575436
SHA2560bd32406e1519dcfd06ceed1aae89f3da67551e63aeb351289d99cabf528ad04
SHA5126150dcf4e02b173f4ac8ec28019388d275bd64d0a3fcc354d31f476b9f545d3f8ac9ff38dfcf2e1d2fe5c00576f8e572b7c59e954327c9e649ac6f333c3e60f7
-
Filesize
2.1MB
MD57d97ec0186dc45897ca39673d48947b3
SHA1b4d81b3f2c47e41e072d0596cf33d0ac86f6b130
SHA2564955c767037d1ed7980bd2e70c24cae04b84be1dbec4d2a2575188b361ce5394
SHA5120367ef33841e032f74a897b90f3d496d55728959eed50c10caddcf70b2c8821f4af117f4eadf484b2bb48d7b0f6d3455b46d6ad2e3341968a4cee6ef6663cd56
-
Filesize
40B
MD5098b011c59a80daf15c048dfee00ff1f
SHA147963ffe950f64e4ab0d329f111f1ea61e1f72c6
SHA25687152114f80cd6a1b36e7649f2e54e18e347d15b45ca4245e1b2f20922a8f037
SHA5122caea2577cd87ab62be62621d976c650f14f063b6ef815d23f218b35b17354c95f2a56d595fce876750fcbb47ddbdfa844812e1218d77aa5249d85dd349e16c4
-
Filesize
612B
MD54e679c16b654169d4826938a050f1b15
SHA125fdc522d4b8a5f57cfada221cb5d258ecd6a7c7
SHA256a1a5f525283230a9291b84269a47d0321f4cc6127e7c9474f606c7200755f96a
SHA512d2bc85d49319c3c930a3c0f30ec5953a142eb938bc3fdd9638a9a2a72a4d60ad5d46d126597ecb5314692661b647e9b15071b1af9bf82d24bd1bd417ef0bd047
-
Filesize
908B
MD5e7dc04b3d32f5143fd03bd9d2fc2e471
SHA157da0ffe75238c40e2143eaec5787a12ca47da5b
SHA2561b8ded72f1962e2fc5b490eb600453aa6e53c377b925ed1e8d5d3f9d1122ac36
SHA5125b97d5341d35306da81451e8b590645b23efeffa279d75bbd1e0e578e6547017517ebba5b91a89ad080ddcc4b1306545440129c474bff25c6e9ab18df2675896
-
Filesize
912B
MD55bd78282f291744c6e7a0c94c765a639
SHA106ae546d15488aca9ad3d2c1af78bda4f9e6f7f3
SHA256497e7bef0ef5170b19d2fa7229d83ce8aa6e13f19046bf647001a3b565d3c9e6
SHA5120be3216ab076dc6e668a0abe41d2f7ca1491c8850c589e3134cfce011819cb8a8ec721be11c35d6b743deee58cfd34d9c1f743a7c73f3916464fbe0ad7ca1bbd
-
Filesize
1KB
MD5379b2c4670854d6ed104eee0140f2c21
SHA13c914dae1b07b074b9852a6ae8f58f1e4ffc1fcf
SHA256b52e18fdb0a196ed6e05d94cf728ecb492997111a8ddd7d78c54d48036417618
SHA512ff82b8acdd8a2637d9dd6906e48c91c30147ed4de9bc8952002e40035aefc81e4f1b0ed4937d8f657d90fe69094e2870390b60059abe880df2fae5ba87e62a0e
-
Filesize
1KB
MD55432ab28e4411d91c383652152b59eea
SHA1690c713d2dc2fa154caee3992388912d9ea8ef0f
SHA256870676f997390a69664751d2a76cde55eae844eb3474a2bc913fd82198c91d8f
SHA512f8660e33623ad51eddc6e92e4e9e46a8a4cde3023e8a5725040ae7aa147197687c5c8c1cbebb3298cffa44edbbe71afb07b437fa1f9518180b91d3217e00d4e3
-
Filesize
1KB
MD5508b240ae1c7d0bd7b1a712c3f794bf6
SHA171ffb1266b2d33427c23b310a06682cd77112c31
SHA256c8c221dd46f6dd6ee53901696073a89983e1ce1a2d71c5542ec95a4ce1bf3bcc
SHA512fe41d61d763dc1ffa396cb8142188972c7c5d21d0adbdb81a83314ae0649a6506c04dbc3faddfda4f91e207966f8d5a790a3f82f4fe82b01289f4d0fbf133fd3
-
Filesize
1KB
MD566d9b5db0f6ab05e092e85ed3290ce78
SHA1a0f57f6c3c78659c92bd1071bb344fa5e346a181
SHA256911a66c523e4e43ac5a1b7f7f4379c2a94e1645108ef5e00cd1190beca3f874c
SHA512db8b93d60ba6621d6fe785a88b562d555bfb689c7e9128671b5c27adcd4d473e63c2f737cb571690b06df4aabda2f93278cff1be285c0542bc7a15c4a221e2e2
-
Filesize
512B
MD509f0b5d47e476f8d244af276394c1cca
SHA180f7ab20a679e6d598d48227082e0503490a0759
SHA2561ab93dcdcacbd9b4ab74e72843a87661fd029511afc5f3931a3507167dea5800
SHA512e5f06768eceb7740938d0f8a52bf915426fe599affc947846253cba6084066cd9ff899dd76cb21ca9050a393320d9fab60c7a509c1115797bf1d0d15fddeb4e9
-
Filesize
2.1MB
MD545ba9f354a2f7dc7d00e431585efc9d7
SHA1ba67e6f2a51df2eba1f5306b7623a6fc5d49d49f
SHA256c277fc07c66c8e766501081f4a068dcccb04b0beca895a0daaa0b8d9d04ec1d0
SHA51254c5f63033f841da94c665f234d7fa766e6092d017c3cef670c8ee031717458c8745ef10b8109ceb6f92155cc6f8ecd2f99a879a650330b7fa67d82a1f919c92
-
Filesize
612B
MD5e33f14291575635a8bd09d7ee71be510
SHA128f2bfeb8c70d5567a1d22780af8c5c9a20ab9a0
SHA256732c288554555b052112780a136580c57e16379ecd70fc8967e0456c469920da
SHA512b1bca9955de18d6b98b9b305ec1a96f8766d56bd57ded94e8ec91c8d7892eb9e6d0fec7f3e8ee7e2c27df82a10123e86faaf9a6ffd32283ccb4040bdf0378685
-
Filesize
908B
MD5701ee026a545894f77ef69b3ec7df49d
SHA106a70c6fe99c7913f2deb33ab8d506f7c922e0cd
SHA256e1f7a1d7c97f2fc587fe352e2a54cdf797ace2a5cc122459e4bf29d19ed52db0
SHA51272b1af9b61303691eec9c427d6bf3137888079cba286763e1185abf99fd18fd1fd02afe74a744ac0508bbafde0666d7c808bb78cab024d407adbb9e0873deed3
-
Filesize
912B
MD58b6a450381d9764b0bd799b640244ea4
SHA198c19e33dd6a733fdaae1bba31bf0b8d651fa886
SHA256c7635d80f20b35d426ba7ca033b1a520d55bf2eb554ad399033cbd4a76de8ef4
SHA5120fccc877814c8f515a0db04b2d84d97301d656cb32e2198279ebf1ec65d17d2a4535e809f58539127593b982c8292f532122a9c0c390cf53097b7c2a5bc40dfb
-
Filesize
1KB
MD59813ed703bfd1c46938be6521c238fd0
SHA181a1a0d684abcbeb95e7fcca277223ca0d6f7a3a
SHA256568163a05137ddbaae421b5c6ad227c957a2d6e8a983e823831210e8adf7f39c
SHA51278994014e2ff0af97e66a9b6b0ba15f86ff02f51b25a5cbbdd7923b500e0818f64edf233ba54e689844ad01ce66e6c3a2a2c6f228e33633aafeca509838333c4
-
Filesize
1KB
MD5cad28e3f8e4e5bdb275bb5757b0512e7
SHA11d8f8fe800bc62393850e397c6fc359554270370
SHA2563ae4fcf5a1548d1a662f98d50f96150b24127bcdcd324830e6d5505e21a2ea91
SHA51272f533d938b1a340f89433f94f8be0852b97c9e0b9cada6dd59a7736ea72c4fd6488e7a61ee644b65e317b98066bdfff5af83af0e5cce905f72987edb412dd7a
-
Filesize
1KB
MD5cdeb42fee06f5a4f672ac36561fa2e67
SHA1b9b65598c28377774bdac33b01c8ab0d99be25a7
SHA256bc96474afd36cfd9d14bc328380f1c271e67279f9d4921c43cefa6663adf1d77
SHA5129f5c627e826207ef5c2c3f2e34260ec7d4d7c0890bb66e179621e8f678474654c0aaf3808fc67320a5f33dc068aaf4fc4ab1fa5d3b4f95d7335897ac5c6a42b0
-
Filesize
1KB
MD5228e826562e3596cda8bd745ed6f18e0
SHA19249c47e0dc6674fab2698688a3198eff3fc3c91
SHA2566d35ef1dddb7dd30ce586869dea2618229f3611222be8bc5cb1b8017881bd5ef
SHA512b1fde96433a0550b1657fd48fc6aaf3e480c1f2f424f115be2efb0858d6d3515d081e6d1e9ae7ba999abd9f08b9b214e49f122b93f411baa04cbab564945aee8
-
Filesize
512B
MD5bdf010a47753b5d9f56ed1bab5d597a3
SHA1761172d1f6bc7fe7b340481bb1640d8e5b95c8dc
SHA256429fc7a241bb7755dfd9d6fdcb4cf1805a5cedda5512f7a04f1abf3ceb4dfab5
SHA512093011d07ad31c3cde64b930b09516accb5bc01d244ebf581a2b258b45186f552e1cc2f0050bb210f14b4e91f306e307606cc0715a98dff2d463b2954c101cd5
-
Filesize
2.1MB
MD59c81a2e4f5dd03f6cb1f7082fce6e6a3
SHA18eae8f5413e1404077ecfd92c40f3ed729fc2e07
SHA256566543d44620e497284e60d8c19b8b6cb9e1832ab5de6a59d32fca56c7fcf514
SHA5128d0571b5da7e3e9e40c8ef09bc286827f5943e330ee9329432fdc0f90dd19758c285d9b6b94f6c3d0d319e3e5232ef98b6ab77ab6ad807c0c99d9d23f29cd518
-
Filesize
612B
MD5e24a1ee37a18d9cca3965dfa905d44db
SHA1f57ef4a4602ea3005a5d295ca50857e59ce91889
SHA256c695e91e98fec00c2443349e950eef70f441d94d1dce3ac716b76d058e738ff6
SHA5122d9b90ea7b301020768c4990e8f67ac9e78c1d4d1de2a47a60123b8316adb9b246af60eab37576b7e7fd34965c75f93ef216ce4f270a7fd7e9a4aac900b7cedf
-
Filesize
908B
MD58c4dc790109ffaf27bc7ced9845268fe
SHA15b848f82c298b6d8b2026455e44e187fd7199e4c
SHA256dcf91cb7d16b6c221184b1d1b7cbec883d5ebc87a7e3b0b59ee42bb8b4dcafdd
SHA512a9564b836a3abb9906b22e0025f8e13d215e0d897fa40757d66b7b7104c816e0a34aa902a6a2a840e0ca9f5434ba984987dc42b3a495300eee975a991a525c92
-
Filesize
912B
MD578f2219c06d9ac84f3f9d5dd4a01f9fe
SHA1da774370fb267afd0a9ca4a893150e11edfa5c8e
SHA256f1822685459933ef49aac74c1ad3fc9b27e3789e60058805e6bedf62dc6393d2
SHA512da0f3aa192b6891d03d8fdb500454b68dd5f05d47a8a8221a1b61c6ccf52ed0aa7fd6602c33f4f0f8b7b1cd88729b06c71297eec25973befd90e6a216f3b5bc8
-
Filesize
1KB
MD5770a3aa49ac2d93cf79fb4eac1b2b79b
SHA1f7a37aea7491d6e91e3bc9bff812a746487bae87
SHA256d7b294d388aba3d0d9ff176eff51f40255bcf80fd03045c231c73f8efbe64d2e
SHA5123e4a4a1842f9f0f33061a57b31ed61931a95302e816ef1f26b4cd2dc1d37be31fda1f0c92126a36583a01a8e3a2eb765263543b0217787cda267e314248f0a4b
-
Filesize
1KB
MD57ac60d157b946274ffba57148aa1a10d
SHA1b550ba92d698aa36002ca31c07b13e07f0d820b3
SHA256cd493f231aa8830bc196d4f09f4db59bfc60fb384ddcdf33747b36850e519ef9
SHA5126388ad6af5fec34e9e72b37bfa4eec7b27ef4deb019604bfdbb4261de405e2b57e3d04031fc64922716d22d07ee4e9c7c438e4ca35986c94d5fb222699491e24
-
Filesize
1KB
MD5ba65c530e05b3767a204eb1c10db8944
SHA14a8cd21d76552a030224f92c58a6d7b917b08dcc
SHA2565225d90b9d629cb3ce8de07fd8cde8106c3fde4aa7a8cd53acd7c840ecb31696
SHA512e30576e019fc801366ac2b66a76a7914af097f6cb108f7ead5647c1211714ccc2b7dd3a79e040f539407ef4807aa9d94aefb2a7ae29067412f1346771d65f767
-
Filesize
1KB
MD50e2dbd1f1201488607f94bda90d77838
SHA1c4d21c57acac0fe2fa9930654267c693a75ff438
SHA2567a6ba25ccc4f8c2bdf31a81a3313e6610d4f22e62c7d64dd3d3fba91c81bc80a
SHA51265d658a77d68bfb343bc76de2dab32e38cc5b1bade2582941620d474dcb5fb6dfd8cdcc03588d25b01c527f40d3e853b7cf129cc6d9274dfb1eec915776f8482
-
Filesize
5KB
MD5d4369613b827e02dccf6f597647cbf1d
SHA120a05edee6b1d543129f4d0cbf57fe7b2c5d4db0
SHA256ebbdda828dff50c92eadf086813bf9eb43df5fbc3581e4fa3fa1a87129fd8ac6
SHA512285a5bbbad021521be2f58c46e93e3d65335c2d2d09d6a7b9c4861ccd7b53cd82422a233097bbbd724d40728787472a86c6dd08023f34e16bf1ae6bf3dec67ba
-
Filesize
4KB
MD5689eb9d3d2a866648f68f76e6a8c3d46
SHA1ba65af36973bb4cb831868ec4882ce204bffb597
SHA2562a8c5af4b19e1144088ff271ec893e963a454107facb5f7155c2ec33cfa17b6a
SHA51298392c13983b1dea2b080c383bd26cae10b411360df2fe4192bef6c0958b5f6bbff98ad876d2edbd8bd771f0e8519ad9c3cc50ceff56afec569bdae864b14d83
-
Filesize
512B
MD55cf9a4571d3d1ad6e8c2068f84b141bf
SHA1518f85240b999bc81fd059ef1510014328b5214b
SHA256c53658b4635708232f080d312e55317f77979c3314beeab82e9ef307b67b12f9
SHA5124d623c6f921b39fe4a65e3316b5d401b87d1d87c297ec3c76edb1fa5ac763375a4614d71615e5ccd43566c44ed70a323c18f6e9d0b2138ffae722df791cd9629
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
2.1MB
MD5ed7de6e8dc69861862df9204d9590e7e
SHA15eab0dd24f4a6cff7ec1b8967e9fc98f50ff444f
SHA256521d518a7bf0514b5ca4a7618a03b7cb0baccb2ec0b86ebf4d9d21ea65248e04
SHA5121b730b995356f03b83f35a254932ef02f01c9b4f0f3fa7a95b9639519c9e382f0c88b88f69ee2aae308e3862e987f5be5c549f90c7c903534e8db9fa0d9a6900
-
Filesize
908B
MD5efbe70ffd3ab2bc62ae82387da0a45c0
SHA150306257524f35ed4e5ad3e919030df3825c3d51
SHA25655d09ce8e20cb3817803d1153f7d839c18b7f62398efec92effb6a6d6d07f6e0
SHA512b4e610ec1c2ffb64b28896694f69d52210969daa5dc755cbf749667c549fd8aa6df9deec83a447ddf6eea1b56078f3ca5f8d5aea45c9b8ecc64bd9fe4be1d111
-
Filesize
912B
MD5c1cd37e0e4a1ea3978a5d2d607d79557
SHA17a2278908d11ba8806942dff6196fbcc521c45b9
SHA256fbc1d5d8f7c3a01c5afca7890a3c6259e7b1a21dfc8bda92b4720f3889620504
SHA51278eecc57073f37827dfe4cb3f449a5a7b0a4ccfc68e7b87cfb727788350678dfc9cfea1cdc5f59a561d10bc248f6a36815c51e7df90ab6c4aadcad898ebe1415
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461