Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
23/05/2024, 08:21
240523-j9fqsaaf6t 1023/05/2024, 08:04
240523-jyrc5sac7s 1023/05/2024, 08:00
240523-jwgqxsac2s 1023/05/2024, 07:55
240523-jskneaab4s 1023/05/2024, 07:38
240523-jgkt2ahf57 1023/05/2024, 07:31
240523-jctalshe47 1023/05/2024, 07:27
240523-jaa19ahe41 10Analysis
-
max time kernel
221s -
max time network
168s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
-
submitted
23/05/2024, 08:04
General
-
Target
Telegram.apk
-
Size
72.7MB
-
MD5
3c1c87ec69fe57ae2aca6b24a1c819f8
-
SHA1
f4c7d1161a6fc09448bf56bb7cf27c3c11d4497d
-
SHA256
17a0d8c197feaa1dfa63d89713d30a3a02f879f39a35095343ad085be48e6b49
-
SHA512
c4ce9246fd1b62ada412b12fc03381470d6e2718dac79ce6202859ffe7e262c6b10059bd3a06330115c7ad9e476da29c68ae607b1f8e93f24b94dca271d15080
-
SSDEEP
1572864:AsI8T/iWuT4CK0EzbUqq+L0h7GldnkWd5fHYZWsKg6U40oq0wXQr25k:1bT/iBcf0Ezbzq+072SgJp6Loqt025k
Malware Config
Signatures
-
BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Reads the contacts stored on the device. 1 TTPs 2 IoCs
-
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes
-
org.telegram.messenger.web1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries account information for other applications stored on the device
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
2System Checks
2Discovery
System Information Discovery
1System Network Configuration Discovery
1System Network Connections Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD584137817210fa7ca09d093e91881f046
SHA1d7f57eea032c87d2612c54806e1ab46f421c58ba
SHA256c53ef39fde14ccd07a71740253cd26386a3d6a4d5dbf61307f3c6e882832a329
SHA51244cb2f3c0ac0193463d0ef60b2d962060fc40742ad78de8291ee855efbd1709184e772d1a1166ec2c76eb30d7c388269b076afa4689dc5076ab00660675ffbaf
-
Filesize
512B
MD5dfe61b3e95362244ab9e03aba5ecf523
SHA1ce1da2388de65158308ba96e8dee3c661c55f3b8
SHA256336097d2bccacbf67c30857573b23b7c713848e6b87cacd721ad1f35c5481db2
SHA512e60fadc421dc203ef32194c523f2e9a3dea382fae6ccc6dbc36c45c0531cc3c12a360747db16f0fd0dd95909327c020dbf9163295fed03cd77512d15584f2735
-
Filesize
8KB
MD5f952cd8a30a1f8c6bebf3ef5222d25b5
SHA17249d19e0e8cad924900634e35bb22ede90ae54d
SHA2561b9ae207f631c897e90106c7eb19b6412aac193c9bc06ef0fc5dbc9894e37cef
SHA51280b8627bfc04c4130608e44a1682be6b14e6e02eac6db7f23682cc867c785b062ca9d10fcf9b9e76af52bb18b7aa3f2a581313d4e06fde4e927c035862035c4f
-
Filesize
8KB
MD549e26e7a5b479bc9e6e844cd0a5afa7b
SHA157952c63cbc39890c999e0cea037568369a8b0f6
SHA25633430c5854da51e77a367c07d7f75ed6a115f906691b3ea1545a8bc03528eb6f
SHA5127c1df6970a1bec01a4fd4a13a3b20d451071178894912baf813b1631b634a51edc0a1f4101afdb3dc24480e3d916b40e14041ed97b14965a3b0a4fcec2932154
-
Filesize
90B
MD5e7c21400186e2a3d1d0f7e33a87e68a7
SHA1aac48ad5a939eb6beea0bb03902b797e4adb2a4d
SHA256f5cfe019293710afa5405ce0026dd21b5471b1645c3ffd135a3eddba5267fc75
SHA512eabdf0e53fc31978edd579f50d54c6b576045b77954a0655f6ce9bfd5ab166260afd1780ce028b1596b4fe803fd5b3c9f188c0e9e7ae2e88a09f2345e2e4687b
-
Filesize
568B
MD5adcecc79557f0a63ae937e4c7499ad11
SHA1d96ae00f9d461a8ac1860bdc9dab205127d56cf6
SHA2560d6e9da873bc1a5770364e6e573554d8c9556f380b03f81fcbf3697edf924fdc
SHA512560b9fe967b5e62d82294661da8e54e94bad75550972806efd4319919478e2691b2b4dcbff6a9957448e51d05801600eda0e57dddccacbac8c4e33009873d665
-
Filesize
512B
MD5a747c64313266f72d8b97b8facca9df0
SHA1998cb9ecfd80f66f3b63f7a177724ccbd6b5fb5e
SHA256ad7d898852c14b06ff5b2e90857b4108a3a2ebafe6ead103bc00c1041e577155
SHA5125aba4acb77c2bd685d4d961c612ff7484a33997fec5e028206f2521d87c455489cf2213a4cb810bd96dfa85eb39e7eb7d51a9311764aeefed2b9489643a6203e
-
Filesize
2.1MB
MD59fd5c3f51555755fdab852c51b346831
SHA1c5ecf58382b743dc79015bac4756e901b89e13cc
SHA2569d875925700467e99405f1f31cb95e1964fb9e8722fd688f0c134b73c3a834d1
SHA5125a8aba298a97644891c79c90e4a1b7aa37168e82db4a5a4ff4795ac5f6c52be6fc3c96c30722ccc7dfa3487bfefd7a9bac4da07d45aa064666c0af8ae5a4eccd
-
Filesize
40B
MD5098b011c59a80daf15c048dfee00ff1f
SHA147963ffe950f64e4ab0d329f111f1ea61e1f72c6
SHA25687152114f80cd6a1b36e7649f2e54e18e347d15b45ca4245e1b2f20922a8f037
SHA5122caea2577cd87ab62be62621d976c650f14f063b6ef815d23f218b35b17354c95f2a56d595fce876750fcbb47ddbdfa844812e1218d77aa5249d85dd349e16c4
-
Filesize
612B
MD5dc2400c25c18d48ac1714604411a410c
SHA19ddde2a5704fe5de0cb5fe58ac6328985bb95d70
SHA256efa5051b455acedf32c884b23e728dc926c5dbd21730fa66aeeb4b1e86115328
SHA5123ec729ac5798bff9d3caf09cbc56526173dd83b8eeac5a1d6215176c5ac56ebc27344907c8de48b5853cf232d55d9f04a655ff94f4688c49cfdea50ba35a3bfd
-
Filesize
908B
MD59f06c5b90d8ee6076d0aa0902253bc8b
SHA107b110880654493c568eda3307facbd1df78fe3f
SHA256e00faf92a11db8440ed11e17708fbbe115ca7c602115368c013cea9225cab3eb
SHA5120143fbc62fcde5d260c3939915ffd85085a5cde98296fe5964dc883fc8ab2fdf2228529b438e5fd44c6a49975edd655da80e7975af152808ce80beff56e5309f
-
Filesize
912B
MD54e364c79bac5b606fc54517917295893
SHA1b5c054131ceb1caa1156c0aa15c539135a537c53
SHA2560611ad210ff302b4b1a1b8f80627b44c1e0138400485378eaa7e3a2794b71857
SHA512c30299ad4db08e311d02a7a7251a8d70a9df7edcec1763b6f5f1107b9d9ef5b02f5997bc85370ab4bc03d21ffb3f8b6d697bec79890c267b82c6f91803dd4599
-
Filesize
1KB
MD5a798012b3759ea012daff20ea555b8a4
SHA168ba25e148650172a27635624f742d9f4b9f32d3
SHA2564db100a2ea583f6fd2318ada498cc80acaf3cdf76d3e70cbc1671f624a9d43f7
SHA5122f9061c1c730e5f9f8ac44944b707b745922c4db77ab512fb3c987d95407b0f1e6892613862310d16111c751ceb8157ee602cbef4e344fe0cebb98b5b5105ab5
-
Filesize
1KB
MD5aa5678f45553539a7976e30f8a3ca9ff
SHA1ffa4a793344f27b4de4d54979f049c135c4fdcb4
SHA2562ca4f1194df2431efdecb5b0b64354df6ba1ef20f159667162591178b1656eca
SHA512bedbd307489cc665f4614947f05b6c9b5f4c302b3fc0a7ffefba7f6bf18daab70b17f8295ca26d4365992204b6a2da88094b103f2e22195b760c14666d55ce7a
-
Filesize
1KB
MD552cd8dfcc351b9d8ebe1c14663d3d1bb
SHA1e20e6fe9e02f59591f4bd5bfb0a49f6aae927fb6
SHA25658cc39e6fdd85e535f1b4c04e9e49ffa5b6807feb44757c7d6c79c3510db9fab
SHA512703e2d3d635af31e8450f762f9cdf26f1120eb67919ab6aa121d883dfbb4b3f9c7b55f6c4d18b213a760247ba0fcabffcc72ba36d718d1b5f75e1bba2f2e6e36
-
Filesize
1KB
MD587074e7e12c97696531855ddf244fab2
SHA1f5c2319a9f4a56960686cab10b67788ff1465c2d
SHA25604cb36707fadff8e540bacb15048ca3449351a34665df2895486d7198c832a19
SHA512b3622e95f1c0da369da23d467eca6e383a388efceb76bd7d232c85cd2de6f962980cc09634a6b92ed751ff4c8decaa4815f41e4cfaa41dd47924a02d1bf8f0ae
-
Filesize
512B
MD59f2bb8332a6bc10fa0d246def311a940
SHA15d8476ee1505e3c4cc86699d6f18b8a08e186750
SHA25606039c7d90d5ec6ca8a92b76c4cad04d0e063f7f404b7cb47f606dce39414449
SHA512b7bd40b1de51dbc5bbe23f80eae4459e0a29a304849caabc262bb0340aacbf9c5d313cfddac3f4157535f7bf994dcad39f3797b2a1e07465a28f0ef9cb218d17
-
Filesize
2.1MB
MD5937ec01ec9e56f7492e5c1a01fa82a94
SHA154bff88ad0a9560daa68132b248060dff4d9e97d
SHA256c573f0dd7e66c3d86a9a9c15bb9874a3c8bea134518e1c05d3ea6be2f9a672c6
SHA5128d779aebc013caa21a01299b84621040e13a5fa59c73e0268096c365ee0221bff09bd7ed058a0df10dc1db6a8153b77c4af13b166573e34f552840d4e9578596
-
Filesize
612B
MD5a1803c13ac92827d979b115d092800b9
SHA12242e4587c00afb0ed36a20dfdff44367946b67c
SHA256032555f0119a8f38bc6689ba6f7384d70ffb955275e575fdae695cd3db135ba4
SHA5122a23d803eb46d4b1f2b1a45d1ba7a23ec953f877874f9835e7205f286d4d015d6466fb643c78ceee5e453e48a205dff985592d2863a02c60c7dc630a5f6323da
-
Filesize
908B
MD5675fb2b817fcfa5faef0138da980c58e
SHA125bd4d4abaa0c96b114282a9f3a791114203cd10
SHA2564bcde4e849567a29ccde24b05d8d242523e43f0d0d7287500977f5c2a3fdab98
SHA512d3dc04ce0ecfec31dc0af8b4865ff3719f41a6d9e13fb606cdaee06c47a9bb2a891e9854ec1850a9406b21ac219a8d4f971b8ddf4cbdfd571ecd5aac0f015166
-
Filesize
912B
MD5f3e70660bfb654002e6ddaf8f5c11b42
SHA139fb5a563362a1401e647f8145a64855e6a106d7
SHA2566e104bc693aab73f052e7225f8868d57792ee06855d68842fb270bd31cfda406
SHA512965fee5e5ce8d1bb1f264ec2030bbde6cad03f020b40ae650d573a08dab14d47d631828da1fc71822976a4dedbac20225d1aa5597eb8a9a2d2fb74d97ac20ff1
-
Filesize
1KB
MD5f19b993bf1aefdbaaa9dfff5259e8b04
SHA14d131940cd900adbb779753d5b5452eec29c8390
SHA2569a82a3195cb409ae611636e3a6fcb1035e216ae9b6a46f35c0bb1e09b89cb94c
SHA51221e57c1ea18c2d418fe6a99608785d0292e20a88002203d7dfad3352f9c70621417afa4901c050074a1ef6eebda775f633199ca2f24a0941fd05b14fd1ae0466
-
Filesize
1KB
MD5956d1f2f37c6d01c5b59945827eec8a7
SHA17efc48c2272f496e8d8da43eb7debef43b2eee91
SHA2560d47cd7969e24ec38e5fecaa113d363e7a1a7d0d0bb053f1f6d9d67886981209
SHA5126464519693d983de36e7fae23b52dbc3b54346c9b5e0dcc973a2724288c4d93a504849c7659319d279e6e12a840e9fee776b799641914e364d93b51f8b3ed608
-
Filesize
1KB
MD5a2958e58064e88d60021258aa5c75266
SHA15bf9e27313accf5e61c239ac109db7eee3c1f847
SHA2568b4a8b9f5e229439ad09abd616f50c83368ed875fd2bb669f5d8b20bacab6a81
SHA512c064503eaab9488354595e28f17d582bf3068fac644237c0aa6cd50a63c367cc133c26c4c5da6a0df3e107d5203270754d9a35c52c006e7f18c9f6c16be85136
-
Filesize
1KB
MD5340446e569672e2da92f07264f33146c
SHA1742205c85d3564d7752abf5ad3605f88e7d75abd
SHA256beb35180f669eb7adad59e9e5514cc640021a6403dae1baebf1594815fb9a912
SHA51239d6e27a663a3e39cd8204d79c31fe0cfa25c81ae1bb7e1e69b3c3fd20df23ee42ea9753c4ead15c78a88669af8e6868f05e8c51397f101dd26aaa18229ab900
-
Filesize
512B
MD51166c2445e4957f16b2ce67eb7dea1df
SHA1d261c444ea9d652137613af1a4352d669ef79c9c
SHA256cb372e65b1e8c9b83918845a2205f1f4123c95d99db5b3a4ec99a23c45afc33d
SHA512df25af3e3b21d302b5c05b58c973ba919731233c9f66d1ffc633921613b968c4786a8373471e5dd8752aa1b1da10f5489533e709917bcb7be1214a998b7f63ba
-
Filesize
2.1MB
MD5b5ac500e05f9caf6a56205338b0a218f
SHA1be8476944d5af1448940de49f99894c2ed2c2f09
SHA2560ef53254aa2b474f64b97e8a464c9d55fa29b3b7ce4a14b614d6c343e57ef026
SHA5124009cb81474a1b76786ecd95a023f6509ab98ceebd29948f36143226a3a8e573cf469dd7892a3953c26fff038f7d0dc6fb6960809a8da073069b81587c297650
-
Filesize
612B
MD5df7726bcfb6d21a026b2abaa8d05d5bc
SHA1eba184ad38ba24aba3a8bb09dbe7c86e78c39d83
SHA25631fad2483ce510ea1374f4db39128bf3bbd7aed2e811dcc27baf0bcf286642b0
SHA512bad8f8a4ef0fa9b97393d5def2adf82c8b6540b45ad133dfe6360bbe3534f3b5c00054f99b6d65f59e9e201755c41c94f1a43b2000b9aaf7422ca50148456cbf
-
Filesize
908B
MD55b396682966273370f5377dbd07d921f
SHA1c888bdacf6bf88b09e024cc8e2760b5cfbecc39e
SHA256c89019ba4a5a3d7080d2811f109c6c69e49a70b684da957a5f811138c93add56
SHA5129b7b35fd4b2ded6b439927baa88afb82aa6dde4b6898fa43329d00d72d6b9ce798a4f8263650f14aee16109af835444e8ea7186359b74f4bd98a179cd04e2082
-
Filesize
912B
MD5f02f8e3ac17d020907ad92f86cc8c2e9
SHA13976cf87c602473379c9b841c5d2ef2c102df842
SHA256abb0de36445fed4daba8b814cda4fde6c36ab638f5e4556d0220762ef56d1173
SHA51256c73d4b125763e7423bbbd28f58e4e99b5c67e953c18850950dfb6dd7a613c278bb41235bb58a426336713c8ec3a2b41f9c9a7a6f9f61a002874d6478c11aef
-
Filesize
1KB
MD5b9d7b599373fb9a741670b7934fbfd3f
SHA111635c12083ff0d9489344de01319dfef9937527
SHA2566271da9a6536f3f99a74af9e41e72b055a16e708c8e08a4710db633e0d226b2d
SHA5126471aac06bae50be55ac7cb34e32296a75254f3917848bc4c554cc8b513cab9b33165075b7c03e296a34e93160b7321faf84aa5ab02d7e1860a62aefb67f19d9
-
Filesize
1KB
MD5f362bc8286107727baef228c4f8a66ac
SHA1e9d2c810813cfb0cb2755cf7b30571adab1d7a61
SHA2569719c3c479a7845de8ccaf3f3fa59eb59a5d90356ad36d177fa476f5a1d459fc
SHA512eea866afa785be8dc879ae7d6a6e609435bd04ab3413256b016366d918d3377cc044b043f045b739ee27595c5908f00d35b7db14b4fe247f076ff66b8ce27584
-
Filesize
1KB
MD5bc7bdaab2f4609f8f7c8e4773001d248
SHA1589f6e8862b88f639f4c23386316df2934f52b57
SHA25685e0dfce3e2a880416f7edd406868c55d7ed97ef66cea6632ded0bcc74307a6a
SHA5122abd52580b952851d73ac0defb000b4f537136359afe096197722d0ff2ff4db512c413905e3d93e3e210c0ab371ed31abf695e17ff4b5a3da39b851d57b07f34
-
Filesize
1KB
MD5a8e3ecc41ce86b678f7b39b67c8d5d68
SHA1af50bf5c78643ba8072f35b5ca51c8dc8a8d1c29
SHA25609654548a19d8ca477b457c98812920d150742ccd7d0f06a1617be315153ae0c
SHA512221d2c362435ce66dc24c66c46cec1615d5ce8d3a7f51afdce5f03ac31d056b5adcf0821febe3c9510db0ef4c97ac7b11f2bf64f29d4ac5341b663ea17bfd0f7
-
Filesize
5KB
MD5d4369613b827e02dccf6f597647cbf1d
SHA120a05edee6b1d543129f4d0cbf57fe7b2c5d4db0
SHA256ebbdda828dff50c92eadf086813bf9eb43df5fbc3581e4fa3fa1a87129fd8ac6
SHA512285a5bbbad021521be2f58c46e93e3d65335c2d2d09d6a7b9c4861ccd7b53cd82422a233097bbbd724d40728787472a86c6dd08023f34e16bf1ae6bf3dec67ba
-
Filesize
4KB
MD5689eb9d3d2a866648f68f76e6a8c3d46
SHA1ba65af36973bb4cb831868ec4882ce204bffb597
SHA2562a8c5af4b19e1144088ff271ec893e963a454107facb5f7155c2ec33cfa17b6a
SHA51298392c13983b1dea2b080c383bd26cae10b411360df2fe4192bef6c0958b5f6bbff98ad876d2edbd8bd771f0e8519ad9c3cc50ceff56afec569bdae864b14d83
-
Filesize
512B
MD59699b4fead2f7ac6bb554673ad8b5c7c
SHA16c59f4311ca9c884c80d5297c53a2346021425de
SHA2560cc2ede7394ab292738c6a16596f46362c2c12dd53866bdbb8dd7b8e2d7546b9
SHA5125c955a6f0916ddaa2486f52bc7615d0dd8be49d07e51650afb3165a5f241bfe1d4955d79c30bc4c9fea62fd749a357922497c9a65a98b265c94fd227b139882c
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
2.1MB
MD5567a0a1203287965af51b2dc7c3ca7fc
SHA14801a0887957ba698c76632a39dc1d7238315fb7
SHA25641cb181fd59662e25a89233bea3bd998b7fd5b917ddbedbe0f3775f3b86d95b7
SHA512a3e809c351d62e26162b9d74e4a63c30aa71e3692cc5b0099664be8ca7c61cf5005cfd134bd6e4db9fc327dcfc6cb3faa926ef74883eee23c988d9a0824f5cbc
-
Filesize
908B
MD5de276673fef7d81528b629154978859b
SHA15e40c642f503442bc2761cb2b07cececb3c2db6d
SHA256fc8696e5d516deef30588693fbeecfce335cea290b411639bb96227429f8ab0e
SHA512f704549771d0245095ab755b53566d420c40074b9c9a65964760cbba961f15293d8c4abd26db9c7fe5d34674a33a3d145769cb143318f55ae960efe3ac32833f
-
Filesize
912B
MD5162e98e1a257414e7f1a5058feb8a5a4
SHA191df6bf351d31121b6e668dbb93422a1830b152c
SHA256eb6940daedc1730748e4ba13439ad984220370aff05d39ab4ac4f07f5a5213c9
SHA512e84137fe20d0b5a7bde6a89b0659d6d74c22a697242a96bc45ee64272909e8d552fded3e50b343cd37203f018096671e80894355cad664d89b0689447a37a78b
-
Filesize
315KB
MD54899aca36d1ed747a447dcac0d101a62
SHA132e43edc0bf3e036683ea8639472e6cd31ab9929
SHA25667a651acd867e046fb4463b31ea584c1468f7243a9d1e2efd34059e8ee2f130f
SHA51250b23dd279a9efba566c6a6523c7537723c0cd6dd3e4871f1cbdb8d5bc355caa3ddea99452b1c8e5356802f812b3768066a9848b93d715bb8bdfa455b704285f
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461