Resubmissions
29-05-2024 07:27
240529-jal4hsfg67 717-02-2024 16:25
240217-tw8vhsgf7s 1016-02-2024 10:12
240216-l812fagc8z 10Analysis
-
max time kernel
317s -
max time network
350s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
-
submitted
29-05-2024 07:27
General
-
Target
Telegram.apk
-
Size
70.9MB
-
MD5
f1fe51f26374ecabc9b22248602b4f2b
-
SHA1
98994636bdce2ea6c1e04cf4802f247f7923368f
-
SHA256
e1abb68ae121dbea18a67dfa87f1fc260b93136c507dc34e6bcc39ca6b018b13
-
SHA512
ae1350472e09a9b2f5038d52f09fddf20a7dabfaa10b4a9b5d4f49f9a27f467d048ae290632c49c0c3b7fcbd6f2ae09a0809061b23fd11902a22430f51c9d0a1
-
SSDEEP
1572864:PBghAeDxa/b8SiFnCpRXj51QjQvx5X0GQFjm6L:PAANThiFCpRz5YQ3Dajm6L
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
-
Reads the contacts stored on the device. 1 TTPs 2 IoCs
-
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes
-
org.telegram.messenger.web1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries account information for other applications stored on the device
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD563638006bc23ef4e51f5d8d422bfcbef
SHA1522ceae7657390843e51fa37769faa708e06c6d8
SHA256df440ea894e4862fdbdb7a8cc73b26830e22f638a6e11ffae8eb164b142f64e0
SHA5126941a6393984f707565ea29af3d07755c6851e8a21cba98492566ba50d69ffcc04486f25445095c9a95f4fc8fa737024f6b7d00f4584ce26ade52ecab5f88b2e
-
Filesize
512B
MD5e9e2f869dacdf53ac895e0ba11f47492
SHA1d5e0f01fa97b312386aebf216e007db7168b7a67
SHA256359f87fae39c1e4b9e5c07707823f599fe2a76771a59cbe53b02704b99cf447f
SHA5123889832f9e2e1002cd3d9dd036abc5412e29c5186b528e54beb4fea89bf546687a7c591d4cc4948c63b1da27b39a4eac11b9b7dedc8f7deacdc36606a0fabe1d
-
Filesize
8KB
MD5588941ffd74264761016dd023b6d8638
SHA116071ec9c6796247b66316d4f31ed6a444a274e1
SHA256f555913984245127a8e42cf54ae7120b1c49e90a74679f895a9f71f8eb58fcac
SHA51274f06a056e1e40ed80ad6a39a88018321c1ca8be6388ccca1dbf42c2a1187f954edbb2c70db727f28a250b8b0109bf53b7bd019a1b787f7ec4e4badf3e9ea219
-
Filesize
8KB
MD5e851438402a6901dff45db8c4e03af4c
SHA1b519af808da46a60113537cd1d302d1cd0b46ebb
SHA25697eaed03b9adf3c0acc82feb25f1904b9d95ada6e3f8b19115901ff3fec92da2
SHA5127b138e2d2b85fd8b9d3bb8f0ce276f7e0d2f863cffac6e5405e169ae948cb6c2e9bcd1e76421039a2c86fd6cd8c4d8973b4b6e017f54fcc0549311332077ae90
-
Filesize
90B
MD5f6c81a4b1583b2acf63beb8035bed080
SHA1ddd191a594a92242ba5fe2c19b2f39e0f1baf03e
SHA25634019709a0ca534dd41e094202ec872790f2e43c49afbd4659b84b5df45bf8cc
SHA51278ba82cddaf9645ba9fe3a2df76a4306e5e80555aa41090862e295eda22ef40721673244f6bd2413c75eb703bc9f797bb24916a1bffb71534118016fbe984d0b
-
Filesize
569B
MD56fca4ae873d6210f6c6b5ca596cad8ef
SHA14a34be76526592dfe2f5665a8d2d7481566f2e70
SHA256480d39cbb3ef21515c373cfd952134c40bab7a86956189641720dd522aeeff05
SHA51206eff65db3943031d85668848b57ba53ea435501d7bc3d2464de63394e1c6f0348abedb47cfe45e8c81164c4cdd226b5d2252e1e72cb43c426b719531258ebb9
-
Filesize
512B
MD5d03c763a204ce19ad7702680a65b7229
SHA1fe337181075b19c9e2a987ed6a53040564a0fa25
SHA256a5a761ee17f8259e4fefa4c7cdadfa57f33aa07866548240a6b1c1b92a11d759
SHA5126a6e6bd89a430169a968c1b54298d394fa6608505adff9cb5d54adc200863d8ca7ad5f3623338243a8e7cef5a3281e10d1516f0bb4af3e7d7ee5d671e17555fe
-
Filesize
2.0MB
MD53de7723bc2659d0f346f53147c721a4e
SHA1982d5f279c0055217ba7c7dcec4020cbb571bfd5
SHA256385db460b0fed9c0155dbeeafc63f103ca1b6f5b417d1ee11371991b97ba614a
SHA512e64671c124d761142236b982173658902958fd5cb13f8f9aec865ddd1661749b6b9c0e03acc2966b172c13a025d609632d3361fbab2f2dffb50075624512e7e7
-
Filesize
40B
MD5098b011c59a80daf15c048dfee00ff1f
SHA147963ffe950f64e4ab0d329f111f1ea61e1f72c6
SHA25687152114f80cd6a1b36e7649f2e54e18e347d15b45ca4245e1b2f20922a8f037
SHA5122caea2577cd87ab62be62621d976c650f14f063b6ef815d23f218b35b17354c95f2a56d595fce876750fcbb47ddbdfa844812e1218d77aa5249d85dd349e16c4
-
Filesize
612B
MD5ec4d134b78d73add1057d3b30b0d35ab
SHA1c3f9fd91f7231bd67692ac93d36cedf84c1284c3
SHA2568832dcc7065295ab6024496df126cbef510492d16f32faf061d59ca06f9a8a8a
SHA5124db9cf34455323be61accf55c98b15d682e0a2d767d722462de1e2beb5b701ac5eb51dceda18f60d3de2f6bbb7700bdd2abf360e3d99911654595fb42a59c474
-
Filesize
908B
MD597efb85935b1cfc4438ad79e5c813ada
SHA1aa25ee9493cb89c902b750592c9584760a529652
SHA2567ca3584145d0cd6913a7fed791abd4a27eacbe653820d516926311d2b99e0103
SHA512d3c41aa0f1821db5eacfc70636e5d68d2b9d49394ce94033116237662acbc3b489ba7d8a732c1e84fe4a9ea7dcb8b7071bf2f34635300e0fbdf1bf435a7929eb
-
Filesize
912B
MD5a84299839414ee47b0f602a31e426a2f
SHA1f5fd09dc9b693924249ff90c00351e9271fb3d89
SHA256e25481c157b8839c0f57a91666d2976ad83dce264debd8d1bb645d4c893f13c0
SHA51210f13bbd1e5385073b6f38f91cfb5a10964ab2dd3f7991241fe6d946c46b6687a6a609588b8c4b51292c940cdd3a73b78d5dc7fc2e60f9039ee57d6651c0ad1e
-
Filesize
1KB
MD506144e6bfc622d008c032aeb8fd4323a
SHA15dd7915eb0b97f7dd67bddb8224959c7f932874d
SHA2566b79c8ab27e5c4201022f1d9395469bf2217a102b5943002af705d64164e7ad8
SHA5123d30e700aa779f7171519a40cd0520617229162d199e9379da916300a07d535ae98cf08497ca65af3a2b3573b2e3d7323f3a9a3626d1d56babe5568cd3852a9a
-
Filesize
1KB
MD5159b0bf5c5530fc043528fe5d4421b93
SHA10d74b988448e160e252a0a8a154bc68687ff0a8e
SHA256d3d13ab9b534ba30a4e0f4442015b58cacd444b056d6688d93798203f937213d
SHA51234058c4cb25d0f2f706ec4650a19d2322c7d0390765411f6a1ba2eb0af5046fb1695f1e30ab021508aedd107b457cecd66ccca9148962c1586ee3fe099efbc30
-
Filesize
1KB
MD5e302a835ea7f22f34cba5f99c9691da6
SHA16d7e91482144a0bd225353ccfe52bb5e117949d6
SHA2563c10f2908c0716beba41e6fef040e68c54993253bc210bbd8553ce261ca91ac6
SHA512d81342d572d882fb9888acfade716fbac9cedf29940ee51c20bfa9ad8f40fc3c23974563dcf3983e8ec374461151865d7a94e5800fb52809b4dd12d2b5f99321
-
Filesize
1KB
MD5234a212143f73712116fc5a0c1b89a21
SHA1d681b58b6ab9fc34661b7e277702ffb3c11e6717
SHA2564332a6c275edf44f0af0a23e19c71bc74b999340d9206d769235420b9329b7cb
SHA512b0c271dc86e4bd3ae5f45de2dedb1ebb554b8401baffe3e4201aa8733e58d253ace2d929483091d6878cfc20f944782a4dbfa41554c36ec64ea40761d216d00a
-
Filesize
512B
MD515a525767339ecd75f946b58e7a64922
SHA11b114bb3b86a11f8359d5f524f46a3b07bbef08c
SHA256907d010c685407f3f332d7aefe7d427d79d7a5a040b17fe51de1b88dc6a89827
SHA51232be25908b6cf89af0d9167955d5b37f951d92d19d9a65e4f668d53df1af0924cf84d3113d6a0c40f6b15d6ef9384953b27f2cbcddb956d9037ddf9fb1be0d4e
-
Filesize
2.0MB
MD57b92d237999cd9620124a20e3eaf9a8d
SHA18f1ea48dd0efe2a2f099ff3446d03215af0f48ec
SHA2564ec99780314ed0710f849b0d32708355dfffe4395613f4129ffcc87cd86e4b17
SHA5125308593f05b538ba5df117afda537bc9270cb69bbf4fb694eeab4ec7edd286b5a0fbdf15a4760e56d97ec9c93d0349f355dbd91ce6b2ecc1f98c3341c2173246
-
Filesize
612B
MD5ec874eb322aad6e78a27b41150476eec
SHA1f6056bb30caf183f2e5c43aeb160334da1b5c150
SHA256b8c84b636ad1330144fac4e09ccd5264f7b4ebee9d9c77a049e2de8ff6c1062f
SHA51275484800bcb87d9b3932536aa7124647b5a8dbc11dcf2f356d2a4d638c6970d3612d4a3cf63f6dc8bd454cb4aa9d88d3c8feb4e4e5bef7759167c1c3cd20339e
-
Filesize
908B
MD521891b1c62f933a3d1be204c8e98fc3e
SHA18c8fd5b0cf831d03ead639c303a8b6dd262e2186
SHA256e33769ebb745d269d40a18f49443b3bc774bb070075ee214b639f0f666eaf67e
SHA512e766c0f1b879aec110daff602d1890e7d33489fd3a66c93cb49ad3eec3f6c476bd107a79b565d731a511a442177fa85c6c9c78d058e68e32b150bf2e2b362f8e
-
Filesize
912B
MD510c8925754a62cd08027056e49e3608f
SHA1eb0cca4994a00d1c8179eff244e1593709370187
SHA2567621fdde40e353fd7a275a1724a48e0d9a58f871038daf12c85c275ec24a73f8
SHA51222e9c367d576e7daa043f5f4a9803035b4e26e10d9facc7c0f7c31ecc875ed23ce0efc23e1932c0f28fef45cac934416eab2812ce146b5595437000fc4d3b72d
-
Filesize
1KB
MD5857fa5e2801c157f33877025cd5f47ea
SHA1a0b5ae346d935bafb6a5e304208fa637e9f68957
SHA256363d763ad8c051e033bd04bd59f7472f7dc323ce028cdc7809df572f677d1a33
SHA512b495ed0e86451613f2fff2b3f089262278f335a496ded2b6ddcf2f9cb5146ffbcf933d5a67699a0138b0a070e4b2fabdbd23cef5ae218a31284efd7e893507e0
-
Filesize
1KB
MD57ad1d5fdcc4a4ce425ad9d5e0d7493a1
SHA16e70e4021cbb4c571e5631f4533f181efde2a9a6
SHA256bcb666b65b25dca5a97e4c87892f0587d55bf531b046d7e9d23b54e1b9770a65
SHA512658aaa9204e67a2f35f23329c41dfc0aafac66442f1cc823389846147d891b50f0fb5e8ec5b683e72093cbc2da90f2a1a1dc47f30c5ef26738fe4ae4343efa05
-
Filesize
1KB
MD58d015619b7239abb822728cdc35bbae8
SHA10e22dcf01e281fb57d9686a12fcfe05d4b65918e
SHA2564c9139fdc36fec24fdf838954358ba6660fba2bb197383857e439127f5da78a6
SHA5125580bd9e6bd77bf317c4afc62322e4a2b39bf858848ab79db52580cfbd05ac96d7e4d575d9193016ff93e79c6c8c962ff147746889e03a8f619015eb0e6bac7c
-
Filesize
1KB
MD54cc8c54b601e17bcb1d652a30b4af3a6
SHA144680c84bfe544ac30455ba86041902b56cfb07f
SHA25690c1f17c41ba51c862dab55388d0ba69a7c5a23021389b1b60c280b343583f70
SHA5127743f1e3310f8c892e2d07d53e2c203ff033a1b46f740619bf323f0693641f72b085d185c96243080e5c5837c462de8fb843f1ea5a52f489994f0791c34a2b90
-
Filesize
512B
MD59132e0ed489d384b141c8ebac5ae0337
SHA14c8dcfd4fcedd82c6ff6fbd634b0875ccbff06b6
SHA2565587ced288b746aa585b1a0163d3561813e934fa82910ca77c34333abace8f5a
SHA512a6a4b3fbc89bba6b730714cd5a4349330373acdf29a6eb44ca39a12397bb839f025af2bc011f713a2983b2a6c44433d3615417ec71e29622b1960f6ab2b13cce
-
Filesize
2.0MB
MD52fef65131eef23b2d31fb9bc4d08f550
SHA1905fa81d8dfc26a607eb65f5cb133c112d83dd3a
SHA25614788d8f4542dceda0959dcfaee5b1af1af6cc522f56237ea83c20b124c22f50
SHA512e6bcf3db6db099ea81a58cd315d773291715d2db5044d0aaef654a35a3b2fe0f311581fb9eac2fbd23af61aa261d40093593a815c217b6e24e0b7bda908d4162
-
Filesize
612B
MD5d449c7b283c8002f1acc947b861b9ba5
SHA102c23c25e6bbdcb3ee9696835e725833c1e5ef22
SHA256a69e23e8ed1e241a5e4126212ea95084c27ceb014c61f2d1fdc767f373bb3501
SHA5120cb68c9c9fe6fd8f659f7d1b9cabb27e8343fd06284f2ced66162f46141f32f6e23f93e3b2133753e14cf34fc2694aa71af8d2c197718be5b81b4701c11620ed
-
Filesize
908B
MD568c5b13a8e7261f2d2a127bcf04353e3
SHA16d3f8a267122bf5c205c109c9120341030e02298
SHA25686cf7c3b6cd470b9abab5f39f53c9df3dc5f99ce84ec58a294476a337ccce367
SHA512ce72da71551b20344bf13a09c4c44ba2e2980d824e59545e6c27440ebf2150db9ad2589468c4ec2900fbc9dce0397b0e4f50482792e65fe48545387cb21297e8
-
Filesize
912B
MD58f2b68c5681a0d96aa47464b9d905c28
SHA1fcfbaf5a2183b841828532bf8d22e51f166df31c
SHA25654bc4544b04b9652d6ec991f659f8723fe5b0ad6dd9c9a08a3b14475852dbe9a
SHA51223d1188eebbd5bfebe8892d1b42962114836a128840aed6422d2721ea89b273e3b68af34901638c247d583644029d58742f0ff6b24baffbf59af6c27a38f46a0
-
Filesize
1KB
MD57668790b22f04a9c469e9b3ad4d6b725
SHA100a397b6d5cc8b6f18b9ecc4f949bbfa535eb483
SHA25639e6b6ff17c8e97ad9f055d59beb8408a472a5c5166df97dc98171464eaa7c13
SHA51232d413a2f206429b8d6b17a85a48b91191184ada24377938584bf13788987c4678acb1b7e199ba63a500b888f2baacc18c287b37d460cf925be8d494f700715d
-
Filesize
1KB
MD574ecadf0bc3bdeeadc5a367ca4202789
SHA18aed160afb2034116fefa7be848b0460b561a946
SHA25644654bcc8df18c89fb707a836c1fb744893df97375897b248499a95d2ede9d23
SHA512ebfdc229ca5131715a22189c2adcb7385a1f66164252a16e202d8edc4d187ccec11732694df4610b9943dfeee9a798ec680e824358fb4891df92ff842685cb65
-
Filesize
1KB
MD5543248168d5e88bf727d4a91f75affd9
SHA17fd05aa4fe11d575e06b136c931b335f351231cf
SHA2569b5f752f166eb88583b59dc1d41ae3f0aff945ecfda48fe3ae2f98e522b4b9aa
SHA512d9a767edb7058543d146b6ff99b8a7dd48f7ada16484447308f4a97f98bc733b1e280139be70f49e3d416ae28d7a632b7cf98c3e75693947e587b09e0557f007
-
Filesize
1KB
MD58a6531ecf59516d4a1c3ae4df8d0a69b
SHA1590b77c638a32c05f94b4d00d1ef0f0501d7fc87
SHA25631ea34ff5ee9eede40f30e4a83a83ee774a2620a4cf29d2b568caa8106a176c4
SHA5124ebfd1da21097d2e40df2fb387de98248bc2db69eb74adc91e4eb59d8158ce8b8b1907f29171014fd1b7e541ebaebf7e99f5ecdf04269df874691d6d222b403b
-
Filesize
5KB
MD5d4369613b827e02dccf6f597647cbf1d
SHA120a05edee6b1d543129f4d0cbf57fe7b2c5d4db0
SHA256ebbdda828dff50c92eadf086813bf9eb43df5fbc3581e4fa3fa1a87129fd8ac6
SHA512285a5bbbad021521be2f58c46e93e3d65335c2d2d09d6a7b9c4861ccd7b53cd82422a233097bbbd724d40728787472a86c6dd08023f34e16bf1ae6bf3dec67ba
-
Filesize
4KB
MD5689eb9d3d2a866648f68f76e6a8c3d46
SHA1ba65af36973bb4cb831868ec4882ce204bffb597
SHA2562a8c5af4b19e1144088ff271ec893e963a454107facb5f7155c2ec33cfa17b6a
SHA51298392c13983b1dea2b080c383bd26cae10b411360df2fe4192bef6c0958b5f6bbff98ad876d2edbd8bd771f0e8519ad9c3cc50ceff56afec569bdae864b14d83
-
Filesize
512B
MD594611a2ee175f8335aa4df1afb9da618
SHA117e3345d7ee2a087167f9481dd23f66487d2ab3f
SHA256de9d6d7a4b1ff509c68c8b97360665e149f11f97fde7c2bed844ba5ba06c582c
SHA51293a8bc27301b80f8e881307218d74e75ec57ea144271028b7e38774f13b8e36e0a8bd949ff9ace71748ac48829d740a7c3fbdee6c8889a8fe4b60116af7ce273
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
2.0MB
MD5ebc03e0daeec36c66394ae809b3435a7
SHA1e43ecc349b5c9958634880299050f1edac0a0d7e
SHA256d1c9532e26c97f9961a3cf4ba0c27f8e572489abe01a19502e6c18ade98f3cb7
SHA5124f5deb37d482c2d613dccb81d3816f2d3abbe2a1c3b6f8d4a402b75e44042c234f8da2b1c6c04f040ca85fa9c348295ae187804647c6dce672afcbb25c71e693
-
Filesize
908B
MD569d49f3a3f441567a6ba335d80fc095a
SHA13301c75c0438c3f3477c761a9a9074c9038e4f10
SHA2562dad4e047dc6e2234e80f0c730d3662db3fa0777777dbe58ac4a762aaf4c3da1
SHA5121f9968e7d6649bc61301fe1f25239b08668b6b3ad4956ea70852bfb1e5166e3c34ede13049a0b0bbc3bf4e07f287c9967b36e5e98af9d92f310a2b88f6a4dbd2
-
Filesize
912B
MD5a3d698decd44c4aaa7577ce1aaf37927
SHA1022856d03beefd844abad50659bab693d2a33028
SHA256287f4de4ce2f6b13dff6b9c2d4ed40d0a14108acb849178d57e15daa862df839
SHA512f956e1cff6ab7d3308910e0af74369bd130ba4e72c72bc1769184fb82ad88286be1bb67f936987034240d7a016a15d2bfa7b6d0a5b2c803f4cd233f87ce97cea
-
Filesize
315KB
MD54899aca36d1ed747a447dcac0d101a62
SHA132e43edc0bf3e036683ea8639472e6cd31ab9929
SHA25667a651acd867e046fb4463b31ea584c1468f7243a9d1e2efd34059e8ee2f130f
SHA51250b23dd279a9efba566c6a6523c7537723c0cd6dd3e4871f1cbdb8d5bc355caa3ddea99452b1c8e5356802f812b3768066a9848b93d715bb8bdfa455b704285f
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461