Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    TelegramMessenger_10.11.0_APKPure.apk

  • Size

    72.6MB

  • Sample

    240708-p56paszdkn

  • MD5

    355c0201f9c0a03f56c7da9d23c01016

  • SHA1

    74716856bc3c5d0e756423538465d0bfa1355803

  • SHA256

    e6fd901b425ec6955f3e7e1c17a9f00ed902c3dd30c098566dfc1d6116603f55

  • SHA512

    ac315de53afc51fd81612522debf242558e487c656d9d1f692ec852ba06919284ec95fb98eadf950a727e9910fa9fa3f7fecacc5a10a1f91b92be5d36f63507a

  • SSDEEP

    1572864:/EFgWJCK0EzbUqq+L0h7GldnkWd5fHYZWsKg6T40oq0wXQ0gj:Ma+f0Ezbzq+072SgJpZLoqtfgj

Malware Config

Targets

    • Target

      TelegramMessenger_10.11.0_APKPure.apk

    • Size

      72.6MB

    • MD5

      355c0201f9c0a03f56c7da9d23c01016

    • SHA1

      74716856bc3c5d0e756423538465d0bfa1355803

    • SHA256

      e6fd901b425ec6955f3e7e1c17a9f00ed902c3dd30c098566dfc1d6116603f55

    • SHA512

      ac315de53afc51fd81612522debf242558e487c656d9d1f692ec852ba06919284ec95fb98eadf950a727e9910fa9fa3f7fecacc5a10a1f91b92be5d36f63507a

    • SSDEEP

      1572864:/EFgWJCK0EzbUqq+L0h7GldnkWd5fHYZWsKg6T40oq0wXQ0gj:Ma+f0Ezbzq+072SgJpZLoqtfgj

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Reads the contacts stored on the device.

    • Reads the content of photos stored on the user's device.

    • Acquires the wake lock

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks