Analysis
-
max time kernel
325s -
max time network
349s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
-
submitted
26/05/2024, 13:10
General
-
Target
Telegram.apk
-
Size
72.7MB
-
MD5
3c1c87ec69fe57ae2aca6b24a1c819f8
-
SHA1
f4c7d1161a6fc09448bf56bb7cf27c3c11d4497d
-
SHA256
17a0d8c197feaa1dfa63d89713d30a3a02f879f39a35095343ad085be48e6b49
-
SHA512
c4ce9246fd1b62ada412b12fc03381470d6e2718dac79ce6202859ffe7e262c6b10059bd3a06330115c7ad9e476da29c68ae607b1f8e93f24b94dca271d15080
-
SSDEEP
1572864:AsI8T/iWuT4CK0EzbUqq+L0h7GldnkWd5fHYZWsKg6U40oq0wXQr25k:1bT/iBcf0Ezbzq+072SgJp6Loqt025k
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Reads the contacts stored on the device. 1 TTPs 2 IoCs
-
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes
-
org.telegram.messenger.web1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries account information for other applications stored on the device
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
2System Checks
2Discovery
System Information Discovery
1System Network Configuration Discovery
1System Network Connections Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD5b246c60e6328bfb6dc3bdddf71f3f6fa
SHA159b2c67d25fa00e3e9507b0b021c9d575d0caf2a
SHA256f089e5a3c7034fdf351d5b616f2e90e5c114a7c4613fa46280ff8c55e5246b35
SHA51239593a4dbc1fe9b9f46c25bb0ebf43c7427669feb4469ca9163a4c804aadd38acdeeaa81cde9041f87f67723d948ca0b39e00117e85c1f1367eb015b97d17a86
-
Filesize
512B
MD56384e67534d2d768ff23a3fc82c6b326
SHA1c3c303fa80465dfc0a352981ef50745f89b83172
SHA256acfb3322b95c90dfab3a61ee8cbe746f64493abad0ddc8b16800d4ffaddefc0a
SHA5128782cb5161d67f13cae427a5d89143d6b8d969f7792bc361a4bb7e5b9740b054b76ecc981e77496f362796230f4c142248200d22ac7569347659d972954a6879
-
Filesize
8KB
MD5e8ca387d5808052d64a65d7c413cd321
SHA1ab541bf25132db86f6779aaf5cf4d4f2219efd71
SHA256caa0a5c6db0827b1644d131d40c52cec9784d38dd0ee08caf99aa39932ed82bb
SHA512a65f63c87f4cd75a0807847e2aad47ceb3ff802c74f35cda9238263589214e5ab7060603867d6f9c2f39a9fb956a0d3bc0c28353702b370ce28862aadb460f4e
-
Filesize
8KB
MD50dadef49b5ed275360709064ec20ebb9
SHA17bee8620765736b038905a132ae5a49589dacc4e
SHA2563e4d44ae23011374b633f945d64965cd4fb5592d72ddcc779ff9e0d2badbd99a
SHA512e1c4dfcd0acc8693b5d8fe350875bd537aab9227cfbe532c6894f6b63b2ab6db6026e2d4607a31b02ddb7630c458622d28a12a07f6fbd6e8949a332ec94a6429
-
Filesize
570B
MD5561504d030109bfcc12c2c49806754c6
SHA1fb03511f51099e8815ab4041d0cbeb73047b2b57
SHA25662380475e867083e5b3aa08bc68d8ab8790fbcea7f570ac2284465bd56b51f61
SHA512c1be942ce4282eb4210d4e99d6283e21c297f01d37e5b6f7ef833f52390e8ab0808463a369485e59cf861b7b1c63c0369ea0233e3d090dd0255fd488d0a1a540
-
Filesize
90B
MD5265741c9ed95c05b655c5a8076ae976d
SHA11781f04bcb25968c7f3d66bfddd617ee84520d9f
SHA256ed240440c389e0a95d662b28df0a358845f5443e9d00b25143df47f15e1a5bc1
SHA51235daf25f79da78e3536f7f86a095783898df51d812913f5fd333806d9ed855a0dca9431f1c9ea29a9dbfe26ad95c021056a953edd959c2e7d12201503e96f523
-
Filesize
512B
MD5e442103a0e51cf048596c723ad04c055
SHA17144d4312acc54f28bec0de4bf12e7c1a527252d
SHA25624cb56ae8e9e0516e18fcb87c26e417513ee8fe98f74ed829d2b4b867108c46d
SHA5121ca0d42730e8657b729f10f455433f02d10dcf56f92d824c03a53684699d5f6583b32a1ab68fb922599f9b2d9d08ae03e4fb4ddfdaca323fa79de4060c4c8db9
-
Filesize
2.1MB
MD569752d67ad6163ca59ac21d9a1cd18af
SHA1da3aa0d8e0d13e3801d5142ffa1e5ec102da03b2
SHA2567c1bf77120c411515a49c3a3c5e10537fd64b5ce576f2906d8be57f5a3e1f2aa
SHA51296842712ff67fe4de847030fbfbb365ab33669ac2d296c2f04d9bc8585c74aa6c3d013df5b6b701ee751364d26724166d46c89209840d61af19a4ff1d15c4e0b
-
Filesize
40B
MD5098b011c59a80daf15c048dfee00ff1f
SHA147963ffe950f64e4ab0d329f111f1ea61e1f72c6
SHA25687152114f80cd6a1b36e7649f2e54e18e347d15b45ca4245e1b2f20922a8f037
SHA5122caea2577cd87ab62be62621d976c650f14f063b6ef815d23f218b35b17354c95f2a56d595fce876750fcbb47ddbdfa844812e1218d77aa5249d85dd349e16c4
-
Filesize
612B
MD50de1a5b3a66539931bbe9a3c84bf479d
SHA185bfec4b6d02a849091208f8b5a2bfcaef6e85ec
SHA256eeb8128ece81eb06485c929ceef1a8f713e8eb5d90182c52907dfa542e0fe1f6
SHA5125b43388ddae851e6074112a4e264e9a36bcb5d1b47524233411b8ce06b93b8321ecc3fcff3bdf493204e115eb95893dbad4c33df2a599701e08dbe04c1ef73d6
-
Filesize
908B
MD5542506e80c6082cae93c7774cf3ad1f5
SHA179fa99e3208983437fab55fb38d9212df8219832
SHA256c6196f92dbb66bb3b77ff3e5f83a29427ebfdf0001aca1feedf3f9b62a9a45f1
SHA512fdaa4ffd9a26453f608890a14ddfb08fd02dfc1d02cf473d6ea54ef5f343c65b9fb4d3fe06c472a7702e112d6952ce64ac5562902f36efe026696ca986929aa9
-
Filesize
912B
MD539e70c2f77225b0fad34d8b54347fb63
SHA1244faa44f47a1e42db7568bda8b6a8ca78c75d61
SHA25642e4ac5ecfc2e509521652d7a55454414b04dff7b1aa382a443888978084ff23
SHA512c05bf450461e34126b6f9867e2488ed1d23cd1b2b5ba972f3e91bca16a618144108ccfb2d24699b3834cc6dc9a8014451dc2330af4d2d827986bef54612c04df
-
Filesize
1KB
MD52354e8a9b7fa479243f0933508d64ae0
SHA1c564fbf6e8a0d4c11c9a2ab8a2f35f37582b1d47
SHA256dcfe9214e41bf9ce758dfcf30a983282a694e26def2b6aeb35449348903bd059
SHA5123b2836ff21144115124957cfb100510ee0fa11447c4b5f404459e3cc8e6e3b3221f2176086a60032977b6031db0af23627ad19f0341bee75a578dbaa40b1bcbe
-
Filesize
1KB
MD540e42aa0d593aafc932bffde134ce1b7
SHA1d9697b930afd00709d2fc3d0228d26f12bc2fb22
SHA256144d3b70e857f7c740dc841afc4fd9c4e32e8f2a12b2016ea1d721c6468ab11b
SHA512a5329ffda011115021ed4bffd02fbe4629896b8f700b4f08480d7a52504c48758bfb878f9d2dbad03500579fbdd06608d84d547cdda94fc7bb5b58721c0009c5
-
Filesize
1KB
MD55ea99e37ffcc6649a15c3fc2033a4901
SHA165db3a0495705c639e693de30bc6db7534f452d5
SHA256c59321f52f7af117dacfc7c2fe80fc2d93b9a93f415c88900c8cfae8c88b5513
SHA5123cf5e393b894278bfa9ee335317bb4cd4638010d6d9d3d8d3708b4ad4b1e1bd726ef9ddd2507df7d8325a72bafad0eac1c83a2399035ee7617d4272b73304fd9
-
Filesize
1KB
MD5e623aace636e294ffcb752edddb82a06
SHA13de59d1c08817f4b7f25d45ec45b85d11e85e44c
SHA256fd546f87fa068310910f82029a594499d9a211f434496d26be7234922d475bb6
SHA5129cbc81eccb1949b817a192591e69e88e73b9f1be706ee45421df05f90abc23478fd9c9b00c4d57f5288218306c933aa51f5bcdf94c797f9aad3b0273caf20257
-
Filesize
512B
MD58f1dcc48e948b6e9e23ac9fe2e8068d1
SHA15aadc828ea46352bd45ea8e1a3c9893cd94de1d4
SHA256b3416c93735f2b331cafbafc1ac9bbe199961bc98ec3b623354b05242e6c1ae8
SHA51291dd7971217440dc875c9cca895c5c7a5e9a2386380e3bf3f9b0e225bc29cea5c977222928dce3e5466a9b0e67a9f9ea4c388737b358714aebd08f2dc3940560
-
Filesize
2.1MB
MD57fcc53b6a0a7aff419bf2e5c3fea0475
SHA100e4cc6fce0974b8f66aac99f8258626f096ab97
SHA256cee51c92879badaa8d3e7f70a846ee66f29cc0179734f66e8ea8ff468307b43e
SHA51203fb78a75e956ee98e4b8be9736a09154b4042672c94c7f52d328e334e47d0543f6eb38d9fc4f95e0a2bf756b271bf14b684f53eebf7f8df756a38906bc2ba55
-
Filesize
612B
MD5a383415eb2e6df009de6b3df35fe0afa
SHA167965327b56f0499bfb749d32795cbd1c81b0c5c
SHA256936e9a1d7cd28078d27e06ec3606730cf4c23e531706a35a38a04e977de35399
SHA512b6f83ad10fa22f6ca8279702a55b20aa08c52d4a73eccc4fe55245016600ff260442b4e194e304db8811806ce26b4aefcfebae5eb598fa2eb26ff79d443d695b
-
Filesize
908B
MD51f6ae4b9902d930aecb8490b406ebd7f
SHA134295406cac61a57b600a401cd693cb8a2149042
SHA256862bc935608ea19a34b20bc1818cc965ce0bb7f2a1df1f134229a4d8378834b3
SHA512a8b43051974508189325f0a59a8a616e540ef46e4d1d51c1f9d44c109ee7585639e6e9cc8bbd9e6621bb16d3d4565ac9d671d72bf1a140c5c6108dc8087fd6e7
-
Filesize
912B
MD533ba111485c39afbf4ecdac3a0e7ede8
SHA1b3edf3795ec150d349d1dce1016fab9cc4613c65
SHA2561ce7aa2f3c7e7d05bb7f6eab8822010c9886b09d741cf839cf813cbd57dac1c7
SHA5124e9bb7276207bf07463e3bfd2c97c25f7776c5446d8911c46868c36136a38ad5ef1a698380c389f7cba8d959d5204113aea3e8b188416cda8c3ddbaf8c9bc26b
-
Filesize
1KB
MD53318f78b359351ac31749483f6a7bc0d
SHA1b9257b4d28d1c0beeb2f0185b9247b3fa5db26a7
SHA256ab975226f7bef2166a8703f6d47c5f9d6a802b87090439ad5da8f0e782a1e3da
SHA51216c1ff193e73dd7753a8632c8bc6faf9da1ede3a1856f9f51babd5fb999cda6e1785ebdb6efa353f6fc38e1e38c4be44c1d29cb2cad422ffb7e7eaaa3ce876a9
-
Filesize
1KB
MD5945a7faa07ecda019c4290cb35fdd7a5
SHA158528ecf0a1e4b20e921035ae21e1beb26715159
SHA2567c27eab028fd7840d0aa6e3d75c6adfa330ad959beec458d5ad8a68b6e7e91dc
SHA5124112982ba94d9e5f004672a4938fbade2589f02d7a30ac71c423caf8009a8e65693f3b1d3bb0ae063340823d03cc30e55015cf5cbb2a8f017de7e50e17c53a34
-
Filesize
1KB
MD53f699869aee8a0968397fdf06c55ea4f
SHA1b8922d8cd83e58843e16ed6819ca5b9d1f76847d
SHA2563e49f60c41e9e78bb15439e1ce8a93ed9d0a42c37c3f39392b7b1a31be797a49
SHA512b63a719d5786b0ccb48b3c4d5abea45d326a628c7a7c4e58f8d1c04dc8af2e1dc894177dc0bb2a10d81e27ec6c5e79d49d0151696e6ff0deb0cc95729574425d
-
Filesize
1KB
MD5bc41a40d2a05c12362e1594bac06c8c1
SHA189f5d29cd97fe7956a202058728947b4df1902ec
SHA2563204f3e25d39bc36d7adeb9ea337774cfb12e444846673d7e0583e8dbe72b97e
SHA51299559449e0b2969dd50148d33182379f3cc1f1a6d66d81ee68b7a2284cc54ca8d25adac45a9de066f4ee06aff675d6501e81133cd14f8b4b40c975879b586331
-
Filesize
512B
MD59de25439aefa263a7ecf28fe7f3309c7
SHA1724f161f7d814aec8db5486e54f841865970315b
SHA256ceed8c71244f5621ca68bd965e0ee08e7fcb3593dfd2f1ff08bcfdd68e460df4
SHA512c9979686540f581880296a4d8f19d142bcbf76500062df6a98e527a7600a152c157c71ee2dc8164631a7da69b8fcd56d57388f5a1820fcaa1be177c7cf51d63e
-
Filesize
2.1MB
MD59b4f27d38399553aeece94506d97ec3e
SHA1d80bde5719e41f421555c1a303333c42f33ec7b1
SHA25658ed508bf76b8ee87f23c71dd00d1c051e92843548baff88a79c20c9b0cd22bb
SHA5123c45c6bc7bd675f0d8505ef02cb7db9540f5b4f2df867956686d73ff10edfbb9504829483f24cbd96d66d086f93c40bf9a62a87cc84ffa30ad773c6f63bd5852
-
Filesize
612B
MD555f14bc295e5a6315db7fa2fded5561c
SHA1f6fd769b8dfebfe08d7854395cd2695e7f87c03b
SHA256baf9c8424522b8d37e68273fb07a3958f70c74ca31d1247b80af232be34c730b
SHA512d7d36c3eee78c2956f4e6b10b228c581d13e3a00bf650ffcb1f0111afa85cc9373ada0cd33c0551e2c3339343d9ec3c901569af62d5bab5cc6f3a752dce09fd8
-
Filesize
908B
MD5461198be09efc6d7bdf6462085159f12
SHA1ec2207f7ac93a75188461065b7ff1b1b4b58f431
SHA256f5dbd9f277a93cb2d2086f6bf0b885f7c51d842ac72836da9cc040dc704992f6
SHA5124a94515bbc25ba0ddce4e3e74d969ac3dad14228963dce55f508bab320eb9c343ce430c233ea4153472e1724d3c278a09f4a44a36eb4233f984d1bab3593f4f8
-
Filesize
912B
MD5ed87a72ba47bab891c9c5d20908b872d
SHA1e11e3f1b4d36d67d74ae2d6836f7cd270458d208
SHA256fb39901114ef290aa1b644279cff172c7a1f5e98fe51e0c02344bce5f9f9c154
SHA5120f5632527ba133086e80a65b1cd2be8e2bdcbea67fe33f51bd8819ddaea46f81fac321545189e8dd8569550913b9d347db2abd879f2faf69d1f0256962c6b4ef
-
Filesize
1KB
MD540155575331d0b92dc1090781889ffda
SHA1bb1519de230d815a6f300709857d06bd734d93c4
SHA2568e10a8f50a969d01ee002cad4961f9332133a4c9eb99a1177d9a7673a3daa8c5
SHA5120416d1204681028c07b7fad582adb61fe79b1757d13e977b281ab4ba5a0417acc129bb569d3802acae427061f0b7e566c67e19e8ccaa5d84ab9bcadbdaefed20
-
Filesize
1KB
MD57a423bebac297e83f737394537ca1bb7
SHA18b19e39624700e3e88e62dd66efe695f9ca3782b
SHA2568f2bf8b9c99eea8621135367fed9519b787afed584dab4b2c8b7495bae1beee9
SHA51276c517d714b0e8eea0ced2c49a3b9d8eaa188ad5782579c19ea02be3e336e325a9e15146795b91ba612d8aebae3e52bd3955037c6d90e17f731b4eaf3a84ce70
-
Filesize
1KB
MD5624c4eca3788d8c2e95133c41f80d7ab
SHA1b3feca381d9cc785adfbc8059c727051aa8d4bdc
SHA256d05e9cf8a51e9559ad31346c46141c3fcd0939f1b3b0661db89978a60cd66cc8
SHA512f25644dee6610cd0d7ebb356c552c21c6282f20892f23674ffac0267b450366c4437793190bc9f3f8f4c71a58b5066af14e7541bdceb62bcbb41913df1506cce
-
Filesize
1KB
MD517847526d187f6f84677202a2c016be6
SHA181fb0442038586269c75df970bf5df6a0defc01e
SHA25657f44e1f9c5afa411b3bec14ce5aa935311cce200472c64a0de7f83b73dbf185
SHA51246745cb828b61baae1a9df040f0fd5d8e5b7dc3e7f032be0bacf63c19e96a31b30db5f049cbebfc3180f0ac1ef5ad541e46406d346159365cce3c75c619b51b7
-
Filesize
5KB
MD5d4369613b827e02dccf6f597647cbf1d
SHA120a05edee6b1d543129f4d0cbf57fe7b2c5d4db0
SHA256ebbdda828dff50c92eadf086813bf9eb43df5fbc3581e4fa3fa1a87129fd8ac6
SHA512285a5bbbad021521be2f58c46e93e3d65335c2d2d09d6a7b9c4861ccd7b53cd82422a233097bbbd724d40728787472a86c6dd08023f34e16bf1ae6bf3dec67ba
-
Filesize
4KB
MD5689eb9d3d2a866648f68f76e6a8c3d46
SHA1ba65af36973bb4cb831868ec4882ce204bffb597
SHA2562a8c5af4b19e1144088ff271ec893e963a454107facb5f7155c2ec33cfa17b6a
SHA51298392c13983b1dea2b080c383bd26cae10b411360df2fe4192bef6c0958b5f6bbff98ad876d2edbd8bd771f0e8519ad9c3cc50ceff56afec569bdae864b14d83
-
Filesize
512B
MD5489d296c1cb88e1a59e96f2e79fb9fd8
SHA11e0bb3aba29b4b1c86c3058e267d403f34779716
SHA25619e4da8816c9f959b42ab3406a98ba14d655e0856091db31fa787299d5fe52e9
SHA51250f41fea7aa1693d4a7a31646c1917715f283ab1f1318d68c879d28edbdba4e1197df88407e43c6e7cd583a48952ee0885b8cef65576460acdb5548d89d0490b
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
2.1MB
MD5412c93c22ac42ff706895d998687c1f7
SHA1e65e05c6d11a16b96ce44868779870016c7de8b4
SHA256231bcd1a508ecadc5e7f5708f9050fe3fcdcfde1edf1443587ddda2bb58a7c67
SHA512d5c3faca1e3ab93045e7dd7967a1fe56fbebef8d5c82e13b7fa67f71664184621f7f3590d6ec3b8218643bd1ee4e37d13b78a2ad00dc9665f76bb737f8f67b46
-
Filesize
908B
MD5b5a2ab61aead79d0ce35ec6804542a4a
SHA15b6a9572d1fb2118165205bd5b7415c0dd97267f
SHA256757be600338ec3c206d73a4bcdb2f0d72902250ac27d005466720eabb0f0838f
SHA5122bcd04f8e3d158b0f5c1b09b5c4b44c54e96770fd13154f16548b7cf4e60189209ec24953fd35ffcef52e4619ab11228fd3c554fd0ad0bfbdb701b7418f787d9
-
Filesize
912B
MD536d750be7a0a2622ca230117ab7dd38c
SHA1f5d0c73fe9b244e7d1dfbabcffa6c10811d72b4a
SHA256ac0272d855115140502e59e00536d844d28b3b10b161ba770c53db56d84776f8
SHA5120e9965264869390298e66d2cfde7242800dc9c597b1c5b4ff69bd5e41ae7f2d71ce77c8095faed68d6453eb467cbea94ea33c460dbcc4572e8ecf39ddb5df121
-
Filesize
315KB
MD54899aca36d1ed747a447dcac0d101a62
SHA132e43edc0bf3e036683ea8639472e6cd31ab9929
SHA25667a651acd867e046fb4463b31ea584c1468f7243a9d1e2efd34059e8ee2f130f
SHA51250b23dd279a9efba566c6a6523c7537723c0cd6dd3e4871f1cbdb8d5bc355caa3ddea99452b1c8e5356802f812b3768066a9848b93d715bb8bdfa455b704285f
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461