Analysis
-
max time kernel
322s -
max time network
332s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
26/05/2024, 13:10
Static task
static1
Behavioral task
behavioral1
Sample
Telegram.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral2
Sample
Telegram.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral3
Sample
Telegram.apk
Resource
android-33-x64-arm64-20240514-en
Behavioral task
behavioral4
Sample
Telegram.apk
Resource
android-x86-arm-20240514-en
General
-
Target
Telegram.apk
-
Size
72.7MB
-
MD5
3c1c87ec69fe57ae2aca6b24a1c819f8
-
SHA1
f4c7d1161a6fc09448bf56bb7cf27c3c11d4497d
-
SHA256
17a0d8c197feaa1dfa63d89713d30a3a02f879f39a35095343ad085be48e6b49
-
SHA512
c4ce9246fd1b62ada412b12fc03381470d6e2718dac79ce6202859ffe7e262c6b10059bd3a06330115c7ad9e476da29c68ae607b1f8e93f24b94dca271d15080
-
SSDEEP
1572864:AsI8T/iWuT4CK0EzbUqq+L0h7GldnkWd5fHYZWsKg6U40oq0wXQr25k:1bT/iBcf0Ezbzq+072SgJp6Loqt025k
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo org.telegram.messenger.web -
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/qemu_pipe org.telegram.messenger.web /dev/socket/qemud org.telegram.messenger.web -
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
description ioc Process Framework service call android.accounts.IAccountManager.getAccountsAsUser org.telegram.messenger.web -
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Reads the contacts stored on the device. 1 TTPs 2 IoCs
description ioc Process URI accessed for read content://com.android.contacts/contacts org.telegram.messenger.web URI accessed for read content://com.android.contacts/raw_contacts org.telegram.messenger.web -
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://media/external/images/media org.telegram.messenger.web -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver org.telegram.messenger.web -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock org.telegram.messenger.web -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo org.telegram.messenger.web
Processes
-
org.telegram.messenger.web1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Queries account information for other applications stored on the device
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
PID:4344
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5225825c77c71bd1cd49c8558b6fbbd2d
SHA1934066621f501ae06660995b1d53124bc26ab912
SHA2560c4141b3fdb6a78991305c26183f2ddef4ac4be0595796dc32d6329891d7570e
SHA51231fe003d305032ed322430fd3cb080fe33b3c0744f64544646aba36993317529049d1a3d48ff623b5a89a200b5691fc790b89e29ecebfba07b4faa27fba67a44
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
68KB
MD52f32c5e1140e5dd9169f69adecd27414
SHA1533d86b5932cf545eecf185df0ae6bbc9d8a1729
SHA2565c737c1a360237ae20835e33becf1e7f75b17b58f1132001f1e1b48b81aa82f0
SHA5129a3ef7287334c91a12d310791b3e79528de9411008ff836400c0ebf089a9ce263e4635bb83a0d71f111a48368b99305a8c4bdf3aea6c2d912b2c4461603784c2
-
Filesize
570B
MD56d0b9a30cccd47d4f9f06facf19409a8
SHA1da68fcc1c9a04ed64a33a322466e439dcaac41ac
SHA2562984411c606cd407e35f2a64fbf19ce8ff84ed0a9aafddf8bd2c52ea272b7aae
SHA5124174687e57fd74046e02cf179af95047579f427a3c87887b7bc1e169ee0aa58b0f18a156c45f37348a211d8babb16db4d49094c91645e44f64320167b6f5c25d
-
Filesize
90B
MD54419f53972857dfaab5cc4aea22e092d
SHA19b30bcad6f79306a3dcc09fba3c538fcff33815a
SHA2564d8d43a7de84345b5a771bf7de45a2696a5ac0d6e8e6e5acb538543774a1b058
SHA512a15d353443203736d20b10569001800330d85c5f63cd344aafc60bf41436556eb3137ce6d5d8ea95d9ffeaf30bcfc8e2d278d93b46cb71970ac04be4ed30d140
-
Filesize
512B
MD5f6cbd8073d0d942bcea9d85b5ca242fb
SHA15b58ae0c1931b88ed842f6d1c32327a555d584d8
SHA25636ce21922cb1ad1059f2e9324093d846317630f2a10d348336ccc07466653b13
SHA512860376498a302807e42b5c48f74925d4f507bb203caae994b126cda62c24e938cd23139f0fa429e4d9d25a69d109aaf8777bddb25044d4d6696572351708bc40
-
Filesize
2.1MB
MD5c7f32a1f236003e4923e05e52115e0f8
SHA18aeae316be2fbc8fa8025c8ed69702abf9463acf
SHA256e9fe921874b89f1d40af84650927cd05c92f5b425ca269d1e954a4fff3c5b738
SHA512dbe8e7eb2e1b88411d22f20b2838229304607547af99fc660646326882d527d41ebd76d617885d5d6387f97702838b79b7a4aacbb27501373874ed935dd66494
-
Filesize
40B
MD5098b011c59a80daf15c048dfee00ff1f
SHA147963ffe950f64e4ab0d329f111f1ea61e1f72c6
SHA25687152114f80cd6a1b36e7649f2e54e18e347d15b45ca4245e1b2f20922a8f037
SHA5122caea2577cd87ab62be62621d976c650f14f063b6ef815d23f218b35b17354c95f2a56d595fce876750fcbb47ddbdfa844812e1218d77aa5249d85dd349e16c4
-
Filesize
612B
MD5d015817e1ec53de68273348b6373ea6f
SHA1d7929c537aa8c68a53d40a6c7019dfdbe28f7e8d
SHA25676f2ce00d7a3230c01e22df118d578ed617aafa05e057675627adae05949d575
SHA51208dc13e8bda592284066a238d5836ce886df8ce3469072768853abbc4ebfb0117017edbc042a49d3b42513dbfba8a37c0c3b1ead5bcd12f14db5f8bd73e9de77
-
Filesize
908B
MD517378f4d16d944cb27ee87adee543159
SHA1c8014364d8657b62c9bb56f96f41b4405dcde1ac
SHA25649a5d7506e68809389de5da9330ba36afb34823831a4dc9f527afe36e3cd21b0
SHA5127c2fc7b28dcbfdb4bf47942d6aeeb697376494afc830080cd3161e42cdad733cab29c66f27d59dac9ba6f6467010593988dc35ffdedb2267cc99c475e9ac85b9
-
Filesize
912B
MD50a1a4239b2607347e73c956c44ccd10d
SHA10e87cd8e8d61c29228489916650801eabe7b150b
SHA2560fd228fefb673d30f5e8584de3a5ddcb110459ead999bba6dfe36dc652ff7314
SHA5125729dd0fefe73123d49dde313eb576c855158c8a57cefcf7a2ac83da47a13cf99c765c19605a4521d482cf891dbc11a6bd71b98b2b41c7e2d457c2104726df5c
-
Filesize
1KB
MD52e37635bf69cf6d5928f9ddabc223d19
SHA14872a7926d6ffa4e4210a35a31cef9304df59366
SHA256dfa069e88234a195ddf876ab523111b58a41cc1854edb4856ed7aeef7dab144f
SHA51251ed010bcef6e94cecb064cdfc369cc81c97f4acb63b8f0020386d1f798e3ef2d51b263a54fdb432b858f8d605555d070acf9689f9478987f39884b1e968c50f
-
Filesize
1KB
MD5c8df21c18b900a7637bb82ff6da7957a
SHA1d9f0749d9f9eed4aa1da3a067f9630062305f897
SHA25619098fa7dbbf7692c017229197f181f045b36732d9c08f74ebbfdb3322453d97
SHA512ca0a0df6376276a0527ac631bf3715125477b2cbf6a41646b8c236099e7768ff8144abb3ac3ed9f4fd7842ed22129acc14cd2d6ec6813f514abf4c39b1f1d420
-
Filesize
1KB
MD58095469e4f5044ff9ab61acff787f082
SHA1a3e89bf2cbec26dc103526a86b33bd7138324fe8
SHA25640b3304170ef993e739aaa8536519eb03509861517ec1156b7edef67eaa9a3c5
SHA512e7d7f726c82ffbbd7fb6a5d30bfc46f3cad8e3bcead06522906be61897c36efadf257857f7df9d90a60cab7fc249945f3cd8acc1a9c8643d1d6bd78b759e79a4
-
Filesize
1KB
MD5cc93e000c88a2b8d9e299f3b2b85baae
SHA1441d56f37ebe37c8f347e59b8fc94eaf1cf07d7e
SHA256057467926ca27924af9e87f3b3b1df6695e6fdb9b332a497d64aad83f3243b84
SHA512e87ff5861281153c22151b0a761fc3505acb45298c4a7cd86292d9bfae90bbdc79d9c60e5d61931d1690d868a572ad79c0eef698f13c50e10dd734b2cc2d8e5a
-
Filesize
512B
MD582a71c654ff419de849d9e8bcadecfb1
SHA18cf34cb1e9f8d2a7eeef02cc674e9f3159393200
SHA25656437387ebdfda31c724bb228e9e7cc365d4f078cbf4f9c13806607834f82ae7
SHA51297b61cd328faa6c54b398e280adb6ed7de54cfd77286f07095d526d2ac39b78b85cdf37013f05e85a3ef627bf8cf05265dbdcbce10281580af976e44c5dc2168
-
Filesize
2.1MB
MD5ed927ab10cfee5bab1a92949855d35f5
SHA110f7c094713550faae42aa70050dc01d5ae9d068
SHA256b8de1a3c8bee65077eeaddf095de1aa42c85234eeaaa76aff997b550afff6049
SHA51285aa98e1f708f810414abd2dd6951cd49f8a9f51574d1d0fd608079fd94128d0ceaf6174e9bc4d4471f4d9f793af7544d12b35d8937e1564b9dbe28c624261ab
-
Filesize
612B
MD5dd0e40cf62f9245702d9c54a4c49ac35
SHA1d3edf69b35b1d576c854b1fd850e39b04846091b
SHA2560183a0cb8fa3c6ee0db191127679146816b8a9d55aab866888e33afd57c6f47a
SHA512bd6d666aa043e1cb30463e9979a73b29a01829ba740892e304b57033ea79f9e14d7690eba5c92ee6a065765e96b5717430ba6ca43ee58b986ff3d80a6119f905
-
Filesize
908B
MD5e88940eb0bfba292c0f4a91d9815f250
SHA1ff2c31c855b8ba72288d9a00982cf4a33ed933d9
SHA2566ae6a3d98094bdd28ee5ea7e7420179d63342e7e0bcf288372d76138c5b9ea85
SHA51258acc05954c866f359acb61f25f2af89353eaed83ee86ca8236f89e7d16e5d17410091cefda6466e2e9e7fef9500c1a6e8799b5bd9ae45492aa2af85135133a1
-
Filesize
912B
MD5a75b4877027ff94452df497e9aeef9f8
SHA1e0c2c428d1029315576b77d18469bc2ae3ceacec
SHA256839bcc08b47ec7a29409e9f5d46ad536a9aa6489c92e6189b086b917439d2420
SHA51214662152b3aa2d07502ccad8a664786cf29294e9eba564d5a7bd4b28eb56e80349c1d20b374106105172737d4950be3fd4dae9f2789ae76fe784b1b010eaad9a
-
Filesize
1KB
MD545b41fea44f069631fc323a8af40ebfa
SHA1f0724b2df4b64b240128fdc8e6486fc4ee958567
SHA25680284f5c60c7a50218b03fa7928459622e7ab657afadd3cbd4c373698d0c6ea6
SHA51270cfac7fa7c072d94d9af4829c2f9cd5e87c7ee5871fbba4f8a3f118ba9a19cea3fd1b5d3e0698e751f785e7644db4d03b2b1dcdc1fcfc815b558925c8c1963f
-
Filesize
1KB
MD5054eda2acce414c943619db293b65fbf
SHA1be72dd36e3e954955447e41fd2cc85ebac6af3d0
SHA25622fb9a744a699d1d95b48d4c6f96ea8d50fe9d0bb312200caede1cdc21d8543e
SHA5128fac53a640ebae832445d5c920daed590342c107e3de46b75b4c169bcb6fa77174f54c205bf5ce5caac6463200e15bcc10b27d4d9f3ecfdd19d959d91947bad5
-
Filesize
1KB
MD5a3dd15dfe178debed0e6b39fd2617f52
SHA1d2a2ed1f197dc4eef8781375501551066852d524
SHA2560eb58d14f81fc79bb122917b6db60a80f1262c9a550fb2ac411f8d3975316319
SHA512e8895a29cda178d7d81ba7b55bd5d9cf386a72c4e942599446957ca66b8238cd83e2cca4ceaec326d4c591f2babbe2859e852bb78dfbfd938f2a6882687cbbfa
-
Filesize
1KB
MD57a39fd073f6a085e4a1e377975e21623
SHA1875ddfbf3354e95aa8dd132723f9bd666973a3c9
SHA2567da9c579eec3ba15fe43b48dad147ff44d88da2d3f87de090ea0347bca2d0901
SHA5126555e07e35ae93226230241a4b9e70e5b65e6ee7b261972bf96f0ceac5346a75acc43a54db6b83144f8f589032e687f9487ad05e2eb373be5074e80e3c5e100a
-
Filesize
512B
MD5517c231090ee0a444b8194819ef82698
SHA1bd220cdea7a2d522c524d60c838e58fec944501b
SHA256517611c3a3cb0e86f55169c56708341708a0211438e6b0f61c569b60d42a5b28
SHA51245bfd14b2762d800dd01b5153ecab07f68ded12fd048189f95d36933b3c9bf943c963e15e509bf1bf4eed4dcc05959ae3ab180bfab27f6e75eae20501727588d
-
Filesize
2.1MB
MD51bdba007f69feafc4af6e303e99fdd64
SHA10b13b487886dd78d85ae37f2815f9fb40fa7465e
SHA256f0d70ffc9e704ed45520ba0bb04baddb94efbcaf00435bdec4f7a44843d61ae3
SHA512ef9d36127a87ffb35aa993e2c0df05e904353f44f3e8a934a82d8e735c2c547279242fd428f3ec0b42cae050d53a9afd3d20202e55e29f86ac7e2ece111208d1
-
Filesize
612B
MD5359be1583be9deb2a3beafc9b0c74648
SHA16d307a3aa503d8f3d99bf1f50519927141d896cb
SHA2565fbd3fdf128fed065e268a380c3205bf2ca629f765ad7b0bad6d54ff17b686e1
SHA5120ae81d0a80840749204bc6630f0f46d152cc6df5b955b4f4ea5fc49d49d2e1af78f7a82dbb3c921dc131c7c31c9caa0c6c33cc584b4f22046ec9894423ecb259
-
Filesize
908B
MD538fc5a49c6fb3361f243c9bc53891e8c
SHA15d71d55b249f5455d3cd4c3a15ef79940b096ffa
SHA256b6a2703c90f34fce99956f7ca68c7efff9bada14ee5b9522bdeb9fc3a240a86d
SHA512a25b86635ae9afc99c9da48414ebf9970ec9472ad7d402bed7c972544218ee270ea223ba4b8a5b46be7eabe6ae5754b762a1b3a0847d6fa82f6ae11a401a5794
-
Filesize
912B
MD5a04f518a3361ba10a7a9929b856a2a40
SHA1a9b351730c96a246be23f83aad92b9ab3e92d04e
SHA256464e4b9afcc70223dfcb65b9f3643abb84f380c9ebc647ed4342e1724be49ecf
SHA51291954b6134b359873e0540e00e117d4026efb22de082aab0f08e0b501c98fe91aa105b870065db373573371a88a6a2159dc1f0bfd77540b984bab1a6adb9e44f
-
Filesize
1KB
MD5b26deea635b1b30476678b0dabe53093
SHA1d61154d697d48f09de1a9ebecb725fff14855731
SHA2568c01420742ded251d38341ace495825c75868003f2b74458b943d5b2899c5936
SHA5120d19c2e39d7d52adebc5034c73768289856beb0aa9bb2e6640ab1fc910fc21288921f0ee6a73e43ca5d078747f286629f1e78d935b2c2f1f7f0d709aa156e442
-
Filesize
1KB
MD5fc210383dcbdb80f2d9285f173dc6454
SHA1cb3452ee9bc8fd9177f6cbc51eaecc3b13e76745
SHA25616aafec63b11335f04b4eca9b0a37346108343b7c802750cd11cafa954003530
SHA51271d94da5c752ccaad9cc1622bd9493efe600d4748793febceb374a609a0c18d08d85ab74c3e73555a0c2a7a1b8cee0f8ec1d5c5ab04e44ac915f47ed57ba9ce7
-
Filesize
1KB
MD5271e29c529dbc743917bbefcbe403a12
SHA1cd9c4d0bda1ba490ef3ad31266db1362c972c222
SHA25663fe833597692ccdb131b5fbbf579467d6a07e33a9ec92746129c12b181634a2
SHA512ada98fee0f71c2724f43dc9c9d412ef388972bbba4ac334d4501621f5cbd0b0e1e028f9184a79fa93d5bc86f3322923e03412f48a9bd13c9d4f4dcb70c696d71
-
Filesize
1KB
MD5be283afe093026a70b040d01cd550cd6
SHA1240deb1c822a6c848c695ae1c5e8322b567396c1
SHA2562ecc73b9cbca79db1f35bb9c800c4a5e0b53edf31c0eda1375e2c639310be13e
SHA51249f6489ea5941fdeb755ab4702a52c05044fc89419089d6cd572806fedcd09cf449032ae46299acd3b79cd10e08678bb789d827f4739991d975f5f00c42bdb54
-
Filesize
5KB
MD5d4369613b827e02dccf6f597647cbf1d
SHA120a05edee6b1d543129f4d0cbf57fe7b2c5d4db0
SHA256ebbdda828dff50c92eadf086813bf9eb43df5fbc3581e4fa3fa1a87129fd8ac6
SHA512285a5bbbad021521be2f58c46e93e3d65335c2d2d09d6a7b9c4861ccd7b53cd82422a233097bbbd724d40728787472a86c6dd08023f34e16bf1ae6bf3dec67ba
-
Filesize
4KB
MD5689eb9d3d2a866648f68f76e6a8c3d46
SHA1ba65af36973bb4cb831868ec4882ce204bffb597
SHA2562a8c5af4b19e1144088ff271ec893e963a454107facb5f7155c2ec33cfa17b6a
SHA51298392c13983b1dea2b080c383bd26cae10b411360df2fe4192bef6c0958b5f6bbff98ad876d2edbd8bd771f0e8519ad9c3cc50ceff56afec569bdae864b14d83
-
Filesize
512B
MD58441423e9f182d5305a7a2f706b58bcb
SHA194fa0d36a06543affa2743b757f1bf4cb68bcddc
SHA25601cd7547e7974177646680d5b1baf34b8f86307b2303517dcb7a7d2eb39697d7
SHA51223f7c4ffb98d1bf294ad4997e3c074f28deb7ca929cf9c223a9e781cbbbd838b4962721b8f16634f57e16e7e9c59bf3a0b5a14549b64475fbcee5909a38223a7
-
Filesize
2.1MB
MD5abf0fa29fd682fe685623c29c2a8f9f7
SHA15bf01cb3896530456cc99c9254ab020af0dc6ec8
SHA25653ac4b4450b59d8402911918b0e34092294bd0cd027e390ebbac0342a446e9da
SHA5127dac2281e8c41ce8d5cf999f09a9f905a2d3186ddf85288a18e7627b739206660398388beeecb5c8ecf38cf43ed450d71348991890298d26ddb118d94ff51787
-
Filesize
908B
MD52b12437dd7bf9644a60e17cbc7260a8b
SHA17739845fcb0f33a0de95d05dac932582edc6c89d
SHA25633508230fb8fedd2bfaca3c0746efdd606757a0831c04e8bcf4a34cca1ec7a22
SHA512608500693ec50a08b942ee5c36c1599dad4c9ca8709eac7b7312b2abecb687fab89c9896758bf342b3eefb9b1d74bc7de7cc6125ceb9a18425a11e282d5142fe
-
Filesize
912B
MD5681b048301085d85f1ccb37c00365b65
SHA1950c16c316bcc120c432959bdef7618dec84eba3
SHA256e94076b9297cb0e929c307b10a7ed6747ec1bb542babd6403959e012901e41c3
SHA5123954cab9d31cf2a20a0955e67f06c3944ff9216347d84aa5bc5f4c6882e52381a5633b52cf9624ccdb3eb6552e4165a7d0d86c5f9416397f66e11d4c8fae09b1
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461