Overview
overview
7Static
static
3tg-ws-prox...ate.js
windows10-2004-x64
3tg-ws-prox...ate.js
windows11-ltsc_2024-x64
3tg-ws-prox...ver.js
windows10-2004-x64
3tg-ws-prox...ver.js
windows11-ltsc_2024-x64
3tg-ws-prox...ity.js
windows10-2004-x64
3tg-ws-prox...ity.js
windows11-ltsc_2024-x64
3tg-ws-prox...ice.js
windows10-2004-x64
3tg-ws-prox...ice.js
windows11-ltsc_2024-x64
3tg-ws-prox...Tab.js
windows10-2004-x64
3tg-ws-prox...Tab.js
windows11-ltsc_2024-x64
3tg-ws-prox...nks.js
windows10-2004-x64
3tg-ws-prox...nks.js
windows11-ltsc_2024-x64
3tg-ws-prox...Tab.js
windows10-2004-x64
3tg-ws-prox...Tab.js
windows11-ltsc_2024-x64
3tg-ws-prox...oxy.so
ubuntu-18.04-amd64
tg-ws-prox...oxy.so
debian-9-armhf
tg-ws-prox...oxy.so
debian-9-mips
tg-ws-prox...oxy.so
debian-9-mipsel
tg-ws-prox...oxy.so
debian-12-armhf
1tg-ws-prox...pk.bat
windows10-2004-x64
7tg-ws-prox...pk.bat
windows11-ltsc_2024-x64
7tg-ws-prox...so.bat
windows10-2004-x64
3tg-ws-prox...so.bat
windows11-ltsc_2024-x64
3tg-ws-prox...ker.js
windows10-2004-x64
3tg-ws-prox...ker.js
windows11-ltsc_2024-x64
3tg-ws-prox...er.jar
windows10-2004-x64
1tg-ws-prox...er.jar
windows11-ltsc_2024-x64
1tg-ws-prox...ew.bat
windows10-2004-x64
7tg-ws-prox...ew.bat
windows11-ltsc_2024-x64
7tg-ws-prox...oxy.js
windows10-2004-x64
3tg-ws-prox...oxy.js
windows11-ltsc_2024-x64
3tg-ws-prox...cer.js
windows10-2004-x64
3General
- Target tg-ws-proxy-android-main.zip
- Size 2.1MB
- Sample261027-vbprksvygy
- SHA256 80efbe1be60a172066ed4029b46680122e7da07276f27c9df3d779a665378840
- MD5 347d9e7bc858864d516bafebb42c23e2
- SHA1 1e5b0185ac0ae293494e1383a091ed99d71b45f4
- SHA512 8d182aa43efec44e277a9351d9883f6be73d1c73a1be625ebfcb2bd0ffc1dd3cd302dd9ccd0e34410f7870774ffc4dda1826a608bee7024de88cf3be03ff7721
- SSDEEP 49152:8psLdAvidqF8B9dII6LYZKn3NxwTDVnSVBSf+HTKz:8pSdA6PBYjV3Nx+6Yfk+
- TLSH T1F3A5337CC78C9C1DD5BD907DB84D07D61A20BBABA54315BA21B44C94BB6BCE22FD180B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/AppUpdate.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/AppUpdate.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/BootReceiver.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/BootReceiver.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/MainActivity.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/MainActivity.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/ProxyService.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/ProxyService.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/ui/ConnectionTab.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/ui/ConnectionTab.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/ui/ExternalLinks.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/ui/ExternalLinks.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/ui/SettingsTab.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/ui/SettingsTab.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
tg-ws-proxy-android-main/app/src/main/jniLibs/arm64-v8a/libtgwsproxy.so
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral16
Sample
tg-ws-proxy-android-main/app/src/main/jniLibs/arm64-v8a/libtgwsproxy.so
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral17
Sample
tg-ws-proxy-android-main/app/src/main/jniLibs/arm64-v8a/libtgwsproxy.so
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral18
Sample
tg-ws-proxy-android-main/app/src/main/jniLibs/arm64-v8a/libtgwsproxy.so
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral19
Sample
tg-ws-proxy-android-main/app/src/main/jniLibs/armeabi-v7a/libtgwsproxy.so
Resource
debian12-armhf-20260513-en
Behavioral task
behavioral20
Sample
tg-ws-proxy-android-main/build_apk.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral21
Sample
tg-ws-proxy-android-main/build_apk.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral22
Sample
tg-ws-proxy-android-main/build_so.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral23
Sample
tg-ws-proxy-android-main/build_so.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral24
Sample
tg-ws-proxy-android-main/cloudflare-worker/worker.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral25
Sample
tg-ws-proxy-android-main/cloudflare-worker/worker.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral26
Sample
tg-ws-proxy-android-main/gradle/wrapper/gradle-wrapper.jar
Resource
win10v2004-20260911-en
Behavioral task
behavioral27
Sample
tg-ws-proxy-android-main/gradle/wrapper/gradle-wrapper.jar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral28
Sample
tg-ws-proxy-android-main/gradlew.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral29
Sample
tg-ws-proxy-android-main/gradlew.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral30
Sample
tg-ws-proxy-android-main/old_src_golang/tg-ws-proxy.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral31
Sample
tg-ws-proxy-android-main/old_src_golang/tg-ws-proxy.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral32
Sample
tg-ws-proxy-android-main/src/balancer.js
Resource
win10v2004-20260911-en
Malware Config
Targets
-
- Target tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/AppUpdate.kt
- Size 11KB
- SHA256 029d8e5a1f6f9d190d93731bb706e5a111878e947bf889c58b2d31ad5dedee5b
- MD5 53b35ebf5b865d0289f28ab3dfaa2759
- SHA1 b0e987f72a34c5b4436c2f928a502838bd4350fb
- SHA512 b672dbc353cbbc6d43b4f377376f00082197b93e7127f64ca01d545f5fea3351d25714c7ab4fe0772e631e0818911296f2af77abbd9a6fff5b40bc4293f1ae89
- SSDEEP 192:ctLoZUdfd8dPdLdlvvq1nHFnUUsweRlKZiiVnwdgKSl4rlz+CXB7J3EuvESu8UT:cmSdfd8dPdLdIEJSKvAjT
- TLSH T13D32869A62E110769F020162E80F12547B36E54F1329DD7DFA2C8270EF49AA9D2777CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/BootReceiver.kt
- Size 1KB
- SHA256 c887e87763d601e75ea3cc7936dfec5207ac243f90f2dc21970bee415c6efbbb
- MD5 332a176f74e1e8ecf8b2eba144bb4f3a
- SHA1 3e05e04f5d3472bf772c3a9f614738bcf4dacfe5
- SHA512 5ebedb6e5bb29f73bb647b9b05e2015ad6925970837bbf5b5cdb35d9c7a8f60e6933afcc1838a8b44338c026669920146e0bac597cc1f5c8d52013e8985d491d
- TLSH T116310271F3B310214B4B52B7DA0933E5273153870584ACA47D6DE26C5FDA568D0A17C8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/MainActivity.kt
- Size 29KB
- SHA256 f1e7a735d16a0230a18be6c97857e28c74966dd0644fabc70bea87757d6b1652
- MD5 bfe2a83e826749dcedcc4430d137dd94
- SHA1 f362bc1a7263ef6f3d035e5352233cc140531c10
- SHA512 46569a2b60fd558dbe3ecbc15d73113dc1649b3bf0d0d68c3714c6991d9912ee564422170839473fc09ac8985b0760300d376fb0e7c4c36ce8103f969dfd9a2b
- SSDEEP 384:cCYppVcOWztdGyUgaZW8Q6kVk5wOJgNHh:cC43WztYyUgaHM0gNHh
- TLSH T1ACD2D8258BA410A98F47203AADAC21D12EB013571B16ED687EDD83641FD983CC6BEFD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/ProxyService.kt
- Size 19KB
- SHA256 05f75f3e64166655442b75b0bfaf6ec1f3321333eeb3b21a0ebf0e25d3ecce0e
- MD5 9f2b1c0492bd2c188963e0be6093a4d5
- SHA1 15ca93edef819d23c96fc9c118e1bbb04a527348
- SHA512 34fcd73c245a3dc3109461c7b8a1094cb1734e49e6a7ad72d2cc490ef6c9584c89b1975957569b371ef1a2f6c3aaabf596155becc15c1827a019187a3ea1b6a3
- SSDEEP 384:cpuA/3kYwsaPPrWsIh4+5FfJO2Ly8hTYri/AIY:cLkYwsa7WsIh4+5FhThTkCA3
- TLSH T1CD9265BB66D110915F8BA17B981E23912D3B840F161FAC64BBDD27140F44B34C6FABE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/ui/ConnectionTab.kt
- Size 19KB
- SHA256 789cec0a0aff6b9c592070d95ac8262fc6cebe442fe092ddc16a1691b64447fe
- MD5 0c888e6c1fc37feb3e31a58106017b86
- SHA1 8d79bb718b3ddb56b814092248d73eebec2dfc15
- SHA512 75e1729f2b53618363682a7d0b4a1b8e36609859a741736fb1f3702bb51569063858bfa4edf880c0c2605d15a6c8ec9e18714e93eb5c43fdd81df3ff4ffe6ef8
- SSDEEP 192:ctvpq8rCnVZSzpgLyztU1K7waP6CyGDl8WXQCJNex7m2mNvA/YxiSfZ2xjT+8h0P:cqZ7PazpXb01tG4D/9oOa/djj
- TLSH T1AF92343655B014C48F477027582D71893AA1B2436E52F9AC7BDC536C4FEA83C96FAF84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/ui/ExternalLinks.kt
- Size 324B
- SHA256 f8c67fffa16d3728f465d752c63af064e84cd3e9c5fa6dbe7c9428712992dd24
- MD5 f73b80df4ccb593657882d9793bb4357
- SHA1 3da71de5644da44e253cd84a8fe286c29856d803
- SHA512 eadd2053eb018a5f63983c26081a07a00689a2f4c3a7bda6e15ec53a0407488e5e81dcf1cae3ad9c87a8ee8960972c25ac201cf4d7a229d808a5a156d0de175c
- TLSH T139E07D2260BC2183279ED107200D37447FB29353621CB1FA7459036C8FC2328D0C9BC8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target tg-ws-proxy-android-main/app/src/main/java/com/amurcanov/tgwsproxy/ui/SettingsTab.kt
- Size 28KB
- SHA256 e0b4aa2cabc44a349dda72552aad8d9052d76737f1db60bd7c9e7ef6ab5de736
- MD5 0948e20addc5d1a1b2bd3f42309226b8
- SHA1 456c6d03a700dddf5577ac89c3b0677291e19522
- SHA512 1d97419efbc851e8ae61e7e8c413e97f56c041b54d1d5959422d813770009d4911964833f2841dee3d0b54fba5c2f7f58baa61304b4192e3ff75ce1400c7a811
- SSDEEP 192:ctg2irlOlvHgB7+zyXzE00pC3wkbXWhcHjkW7Dmn9YaIBF3ffN267cXgXbBqS2Sk:cG2ze+yZDqnijn9wJZr9jhrTVRptdFEQ
- TLSH T1B8D25435A9B42594CF837123EC2A21C5386171976921F99CBF8C525A0FE9C3C96FEF48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-ws-proxy-android-main/app/src/main/jniLibs/arm64-v8a/libtgwsproxy.so
- Size 2.0MB
- SHA256 3388478c6935c5490612f786905728a725c239b3996ba139bb0d6b888cbb2ec2
- MD5 b9c88f428ef8fe2342fe08a8e863672d
- SHA1 18bd876fe4de9fe84a6ea27091c8621591b508e0
- SHA512 3f1b8b195bb90f7492b6ab566a74908b664834a720b72196e8ba37ff63ea58b9852647d787a9ae3866a4a5030c1cc00df6c1b323f232d8bf45eca232edd03c76
- SSDEEP 24576:IfXfEjdGm4zQaFMUVIH06iyUEcIhkA3oxq2nHyN9Ze32koEJlbjXoh8u9Ge:IfXfoElIU6ifEF138SfkntSl
- TLSH T11AA5AF0AED0CAD7AEFCDE07CEC8D04E2B52775691360C0647826964DF683AE14B79F52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target tg-ws-proxy-android-main/app/src/main/jniLibs/armeabi-v7a/libtgwsproxy.so
- Size 1.3MB
- SHA256 bf2f237bc215d6b5d7e45dea999108cf1433da90d4dee33126c789b7b2ee76f4
- MD5 a8503caf2b8a11901092bc2b435a8aae
- SHA1 2ed02fc2d7be4907bab34855cdf65b8b281e65d6
- SHA512 41423cba2c01d18d5990be90893078c534f194131d6a8305647186bb9023e31f493fbde0932ecdb2f1179c18b7b9d63e2124ec228f3bb03769cccee047fa0c8c
- SSDEEP 24576:NkMEVJmWdGmjzYQFg8wz1CguTMF3HbkfLsv3MKE9:NmZa8wzqTMFcLsvM
- TLSH T12055D0C2FA458CCECB9E433CF99288581F1B948DA5B05BD97B4DA93CBB637124C1C295
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target tg-ws-proxy-android-main/build_apk.bat
- Size 2KB
- SHA256 d367b5c14a43b6a4cc7033093a3fdd7feca6c6b3d735d814699736b0a56f9867
- MD5 677700d1cf2494ac128412841aa30ff1
- SHA1 d0c6bbb2799f8d30f812e121aa5ed07685d5ceaa
- SHA512 d5edd73d176ad9b09ea0a47476edf960a3371a3bd069ef93d71dd06eb40304a8ce0748633c5295426f182e069eaa674a9a94e38e18b6c7fd1543d3fea5c8ac3f
- TLSH T1A251F3693AC493BB02C64D97CE553614B528D97B47C08DFCA003D5A61F271D62AFE2C9
- MD5 SHA1 SHA512 TLSH
Score7/10-
Loads dropped DLL
-
- Target tg-ws-proxy-android-main/build_so.bat
- Size 2KB
- SHA256 e78db7e70cd68602b2db410fafa6e2a518bfc3e4563d9b1c54b5aed63486dff7
- MD5 c3c62c4a8046e835f33300ae11fcd43f
- SHA1 b586d0a1f1ff5ea095f482f217092bf7e58ba791
- SHA512 345614983275c0647c8a0d7fb18c81e29610c5d0699288b5f1e99f1dd0fd758024252b081640d5bdfc30ae9ea81b3c63607528846e3c089da27214313563bc5e
- TLSH T12341E164B54C01F3959548479B481653B23A0CFB68F88ED9B0C696E23B2F9C509FE29B
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target tg-ws-proxy-android-main/cloudflare-worker/worker.js
- Size 1KB
- SHA256 2a6ae4cd7f20aa0b02857531befab119ae0d9e981577679b8e21aa31f8cde14e
- MD5 edf08e0dffa71f787b888f961e296cf5
- SHA1 7f0610e5eeb8060c7bfe1fbeebfb94630817c0f7
- SHA512 cd5a5e9e964ba008b3c67bead559e85116a0f50b77ea815ac142bdc9f7d3ce7caa858edeb6b7e54500611fb49c87eaacf247e5e03ae29942a2b58bea96e013aa
- TLSH T1823122D2F77C326B03F520994914A0CD212CD973BF4A4CFF5F08596624EAC3EA252E28
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target tg-ws-proxy-android-main/gradle/wrapper/gradle-wrapper.jar
- Size 42KB
- SHA256 498495120a03b9a6ab5d155f5de3c8f0d986a449153702fb80fc80e134484f17
- MD5 3a7794bb805d141627d87e6c8f42cfcc
- SHA1 c282740b583d2f485e2af5bbb8225b2ead908e85
- SHA512 afdac5accf0a919c44345773ad301e88ad6622169b3274b3e01b281e45e85c2b5bacff4b39d3506740f320c754983819e9cdc6a788e43c92c787c673d5f4b09e
- SSDEEP 768:u55ck97IWdaT4Q5Lq/3M0wFdap4/vZurAiioZqeS03Hh:mjIWdaT95+5p4XZ6AfmSIHh
- TLSH T1FD13BE629D58A56DD043063B21A78BA49379A30E49CCD73F1F72270DABD029F5B0379E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target tg-ws-proxy-android-main/gradlew.bat
- Size 2KB
- SHA256 2209f919a22528af59a2af2ad97e8d056cca18e39f7d87aa3fd549a73b180150
- MD5 32becf2399ca457d739600b1917397c3
- SHA1 76a4f2a37eb4ea44b7d7352aa785cfb9b13ae2e0
- SHA512 6bbcb8e2d17e7706b17a2edeeb7071ebdc80b8818db5ac3cd01c85675756c81e26849cf8c4bb92fcc9c1b8a5ef113a1bdc2dfddae7ccd9cf1f6247f8957f7ea4
- TLSH T1935141BB370B527B1F7C07697F1D45C37A16A3EA2E4BA31C940F450D623178A51C6AA1
- MD5 SHA1 SHA512 TLSH
Score7/10-
Loads dropped DLL
-
- Target tg-ws-proxy-android-main/old_src_golang/tg-ws-proxy.go
- Size 61KB
- SHA256 903db0aa9abc044c4b489638f3b145fa58d7890a1762068236596640fe43e4b1
- MD5 ab689647cf4b2d622cc509041c2fc858
- SHA1 3985047de5e7baf0a42ef941ed445908a9d4505d
- SHA512 2f38a769fe763413ecc76ad390cbd8aa4657f4bc7bfcaa21d6043d424ddc6fa1d4ccd8ec732764270b76ec958ca48cb66e5ba479d9549fa4ba722b62e6e7066b
- SSDEEP 1536:VZ44bdz4bsr+4bmJiknRPRCHU07gA9ek6NPggi+gOyAcM5:iiIbCHvgA9T6NPggi+g0H
- TLSH T1E253E690EF6E81578BA1D02C6D01E582FAECF8671CBD90F6F88D61E974440ABE17C58D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-ws-proxy-android-main/src/balancer.rs
- Size 1KB
- SHA256 9127b4405950515de6456240a416fe6011027db25b6f76df85f8137aa9aae4b5
- MD5 4a877d637c1c0194154a5a5f516a2eb0
- SHA1 8504741241ef8c1cd51e1bbaee714cb8da1f5113
- SHA512 fec50f8b4bc86dcb09af42d17187b66d2598a4ac6857aae79ad1f922c3118698171df2baeed0bdad48a1b9f6ffbdfc6a558e2e6cfd1349b2d5a5eb559a654fe2
- TLSH T12141551424B31910A2F3A5ADB19B7017B411EA6B71399F12BD3E8120DF16228D8F2FED
- MD5 SHA1 SHA512 TLSH
Score3/10