Analysis
-
max time kernel
326s -
max time network
335s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
29-05-2024 07:28
Static task
static1
Behavioral task
behavioral1
Sample
a041bc05ffa20dc6df3387818a06329b54c84ca70cb281c0358d936aee0b3858.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral2
Sample
a041bc05ffa20dc6df3387818a06329b54c84ca70cb281c0358d936aee0b3858.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral3
Sample
a041bc05ffa20dc6df3387818a06329b54c84ca70cb281c0358d936aee0b3858.apk
Resource
android-33-x64-arm64-20240514-en
Behavioral task
behavioral4
Sample
a041bc05ffa20dc6df3387818a06329b54c84ca70cb281c0358d936aee0b3858.apk
Resource
android-x86-arm-20240514-en
General
-
Target
a041bc05ffa20dc6df3387818a06329b54c84ca70cb281c0358d936aee0b3858.apk
-
Size
68.9MB
-
MD5
7a5a2264a38d14ec36629301a1f97ed3
-
SHA1
9ff4d9a4fd79a6decdfc452d21f5954a90703398
-
SHA256
a041bc05ffa20dc6df3387818a06329b54c84ca70cb281c0358d936aee0b3858
-
SHA512
88bb457453d9831805199f588b24517e2f88a86fb1e0bafd3b1be3cb19b4ae115e6f42081aa723ec1653d6bfd6ea95601dc39b7893a7812f417e4b232f6843a5
-
SSDEEP
1572864:zbjAo4jkKsBxhMCb7ZMU1B+3cd9xXX0GQocKL:bcjkVhMChv1S+DfcI
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
Processes:
org.telegram.messenger.webdescription ioc process File opened for read /proc/cpuinfo org.telegram.messenger.web -
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
Processes:
org.telegram.messenger.webioc process /dev/socket/qemud org.telegram.messenger.web /dev/qemu_pipe org.telegram.messenger.web -
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
Processes:
org.telegram.messenger.webdescription ioc process Framework service call android.accounts.IAccountManager.getAccountsAsUser org.telegram.messenger.web -
Reads the contacts stored on the device. 1 TTPs 2 IoCs
Processes:
org.telegram.messenger.webdescription ioc process URI accessed for read content://com.android.contacts/contacts org.telegram.messenger.web URI accessed for read content://com.android.contacts/raw_contacts org.telegram.messenger.web -
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
Processes:
org.telegram.messenger.webdescription ioc process URI accessed for read content://media/external/images/media org.telegram.messenger.web -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
org.telegram.messenger.webdescription ioc process Framework service call android.app.IActivityManager.registerReceiver org.telegram.messenger.web -
Acquires the wake lock 1 IoCs
Processes:
org.telegram.messenger.webdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock org.telegram.messenger.web -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
org.telegram.messenger.webdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo org.telegram.messenger.web
Processes
-
org.telegram.messenger.web1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Queries account information for other applications stored on the device
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
PID:4342
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5e22e1b9cda393ff42c1fa4fd1f82d2f6
SHA112b0582f1c767a69afa82a57ba81a47177f3ac8c
SHA2568dfd894a0122b9db1be5a77eb051a31c2cc98251e8430fc446d2cf3b69d27e53
SHA51213e226053047f6d0fc370c9485b8fdae8ffc4631a629120caefe2e948cef2ddbc9a07b647158596abafd1c813a3a1d60e52401a2263c5615ff5829cf95e00b0b
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
68KB
MD509ca6cd5c52b6aaf93fea4809ee4b5ae
SHA1c08a9f72bb014116521a2cc824eb64dc938985d1
SHA256cc876781768568006668d44a682a0eb09d8ece09ef7f220dc1f8d4d8661dc022
SHA512a88888f882cac1ec339ef3a6a0ea89f63f0d992c440018de3576a73eeb99702a037e67400ce9d32c8f7d6fd3ba4afe92f868502d0fcd42848a416145ddeebea3
-
Filesize
90B
MD52227299765fbbec67b228fe97ab92de9
SHA1f6d8475baa07e98973a3046d9515686fd7a18e40
SHA25694cb7dcd92fafb1038913d92693e6671a663e3b8340decaaea1fcc9849dba8e0
SHA5128f2ce9361995c674b0238219cdfce85356709d3b7855418665c0a7fdf87192d7449e0324defdcb27e6a01d504009c819d50c0bf57397c9836e0155dffff59f20
-
Filesize
568B
MD54b22d7d6a86e6922f794cd8c25495ff9
SHA14ca9902727181b0e2213bd726165ebcc9160ac56
SHA25642dc599709afc42cbc62aa6cee0cbf5d2b4b60441fb774fb063d566bbaefdc92
SHA512b2d4f067cd3268c31b7da4f4ba94208c0c8a5e348da09e488fbe6e6ad9d79f33d43a0257c34577ac9f41840c6fbade5e9200e206e8b6de435b5c92d20ead618e
-
Filesize
512B
MD598db257ec1adbc21ca181a405ba72d9b
SHA1dc9eb86e27e0e7f832e1e5382033fcd7e8e5b36e
SHA2569bc1512b2a4a6eba06ab03f7970ad8f79f19bb5b09782cd20c2949cedcfc5650
SHA51203ed51b55b761effc472a40330e8fc56cc0c204740995a7341f4ad998805638ea200d1e74b56e74b92d4f7cc1c557ae4764381b39d1a23a5e0f015aef0f4c8b9
-
Filesize
1.9MB
MD5f73e4efb4f1bbbfa3bd200acc1325848
SHA154262759ab41abdb92b4a3e6d9519c29d691879e
SHA256e4185d6fc2dda4d22e77616a1b80770fa35e37aea5a79d6dac4f3d9e9f70ac37
SHA51206921c0216fd7898afc7056f34f705775aa6f15a5269364f2748b3a6c0e2a355be1145946366580ca312850d14e3d06480951ff42c57ea0b392463ee16a0d651
-
Filesize
40B
MD5098b011c59a80daf15c048dfee00ff1f
SHA147963ffe950f64e4ab0d329f111f1ea61e1f72c6
SHA25687152114f80cd6a1b36e7649f2e54e18e347d15b45ca4245e1b2f20922a8f037
SHA5122caea2577cd87ab62be62621d976c650f14f063b6ef815d23f218b35b17354c95f2a56d595fce876750fcbb47ddbdfa844812e1218d77aa5249d85dd349e16c4
-
Filesize
612B
MD589630ccc04e2967da33a7e5a4287ef34
SHA1ab29c04a5a11d26e760e998f7e973b1b7ee085d6
SHA256dbd01d1bbba17d77841261c157c4686f4dc179b5ce53a5b272403e87986d0121
SHA512866dbc1eac4b7a90ed15f598d204a1b0d9ab55d5940f19e05516ab72968d6d92390d7abe7b69b475d6fc313585b9c8b387f4cbd99d937b92d40268c8a49feabf
-
Filesize
908B
MD5a05d5792a7235d04697f361ffd4bb11e
SHA132fd7d4b4193e4e86eb6fba5e57a9c552e6f508b
SHA256a18affb1576cadc356a02e33885c74e5135d6de7be6f00766f518c36ba9fd696
SHA5124961b5359c46c036aa78c189b25d44c4bf5ca0aa2a336ae90607b04a6093c6b4b53dfc2b1be20613826c4141f9a40de1fa6c68592986f507834947ab7484ecb8
-
Filesize
912B
MD516f13334949f779e3dd2446e48fd1fc6
SHA185c01da0edc05e53a1442036e865b2a9ecb3047e
SHA2561f9bff0421bdcb5d97305c985f50cf374c4839d1db21aa4c3aac7d26bb2455bc
SHA5123b06fe25b0fcdeb517f317c372f60ff37d2b79e94b188f87b44f7d12b2bdb65f9d4aba2638072f27a07349019275df8bedadeb2487acbd851bf78096109e61b9
-
Filesize
1KB
MD592bb20e78f2ac883eda6f83c9f49780d
SHA1021f2399f3d4eb4da86fd880ca191a1ae50667cf
SHA2565c9cf7bef072c131665eb505dd8074e6ca0207258ecbce96a0ec9f56d53dcf9b
SHA512bcc733c43e2b7841eaef23021484eb7cafaa40fdff298c858a01cb892f4d376a951e7dd3be1dcdb3886eeedd2d8f97fcdb80ca22ad579bc404ea6c416da68ec8
-
Filesize
1KB
MD5cb17fd0009a52a712276078d9150a82a
SHA138dec8dcc0f6630131ecd94ad9ea473a29e2d7f3
SHA2565b50c068faf958b846c45fee1d1afc8afba0baa09593057fb0c398f5f3190ab2
SHA512f2bcc18d00d9bb2bbea36af210276444790e32f73a9fb46e59096f893780679844de26211d768bb068e19cf16675e68d6eacef4643e286c6592db581b4f973ca
-
Filesize
1KB
MD5d2c8bc88854a4123a8dc4a05fd365691
SHA13189b55776d6bd022aa22f720ea62b98f53135f8
SHA2563151aaf51eef10f5335bebdeb4a93022dc0a649a345dbc367efae86cdd260a01
SHA512b60ae4d7ed0753097b2480ec1c310a106d2160cbd6c2559453b2306daba893183c56c0b2b529eadd9eba48a7de1a2e83ab3870917508a1bc4ad09ff1b9ac245c
-
Filesize
1KB
MD561802ad6ca6094bb1beedd2c04767451
SHA1bd84f8c32f9e741aa41de9e2d522acb26df2bd7a
SHA2568b4b03a72142852c18a84c4deed3cf0b53a32b0c1ad9303ba7b62c678a25909b
SHA512b204f37409bc81a6faa65b8189dcf060dbfa958593b72637238ae7054713acfd2dedbb02fa0747a9c926149033e3977f7f7e8fdf0ea3183eba12ebaac01a676f
-
Filesize
512B
MD5b2df8887b2f2f7f9f07f54b7df96ba8b
SHA18013a7919eeeb1e890952d786865f96fc5d04a92
SHA256a92f2a68b47bac7da285ba848ffdb1ce32da06354c9dc62556b0d253abc64d65
SHA5120f72b1ea6286f70708cf27f678e72b375c306fefb2435a60907284eaeb5b975dd3b9292f32291737f6cc5f4ec8b75297e7cb40de211a9d9f14f932ee9831c3ac
-
Filesize
1.9MB
MD587556607c75967f0ef6301c93b392909
SHA164f2c33562511e9f2fc6717f1d39a818abe91284
SHA25612b8022c932a3e545d389c0ff4878cd7f91138abac20af51c25add6ac0da6b2b
SHA5129b682cf335f1ed344e0541d332e11216ff2d4805bc6cd786c76fddb0f3008fc2f51a0976085de6e65e544d6102b9aaf329989031e13c8b54c2ea9454238285a1
-
Filesize
612B
MD544019a43335e89b27c9c7356cb9b1c58
SHA176420823507eb13fb245d450e36e374848bb974d
SHA256e8ec4528c5d4c52218df821f57c06c99cbd1534ffe60c9132060c53b89695725
SHA51297d2e645cb4347495477cd09a22860eb78b19e89ed10d42511cd6166cbd94ee5742e1c51daf220200a6726f2bab2240f1db614c8907429a62dab8b3893784610
-
Filesize
908B
MD591782ea6dc324ca498077773998b165b
SHA15c328ce07d3061d1323d6b13551896a90f8ca759
SHA256cae4c4bc075681ef3962d880bb43eb03cdfb8764350baec1daf9112b3fc7aa26
SHA512b8a8b94dd597fa1174fe9a7654552f6cc632bf21e86862820401d459ae89e07f8d750fdeeece136fea46087f0246ec0847a0de5606dfd36e6f65ae0050b3dce0
-
Filesize
912B
MD5fb7ddaa34fb213bff785f0d7ea16a355
SHA1b35fb811860067a546f3ac3fdd8bcfaf84817c2e
SHA256076de7fbe38936aada7f6ff39c2f32f66aaa507bff9b828be047345f49ade32a
SHA512b55e4c4f22661411eb742612d45987d442ad4140b898badd486b02f3c425ce980d1a7398a07a0ec86e3631055f81b93bc239a2d12b1e7f98d808ff9945e0c470
-
Filesize
1KB
MD5d67bdf8714f411766995381370840e6f
SHA145c7a0e86bf1e5bdd8b6e80b74448bada641a875
SHA2567394b972754713906cd10d74b60d6a4b786bfa9af9d21b2275414cbd31ab924c
SHA512bd75c23ed34b94c4799427aca1049e52f90322fcd48c48bd49ba9356b42442de6acd795827738a912c235d8b389a14b64003731de05d308fbf6acbafdaf601ae
-
Filesize
1KB
MD5f6bbea1946c5bfcaaf3fdbcd0e84cabc
SHA1bb95e915d5a9a8c6ee707d4ca45ae756bb355caf
SHA25637fcc69c8607553ce5982acd8027992a94069b1ec73f6891fb22a95cee609185
SHA51279576bed4a2c03417c9eb560d8a060da5868d8307271f5add60f659ee739cd8173d95124910f49a4380967ee152b75272a84184fd31d10d77646f6442d73a149
-
Filesize
1KB
MD57669e33817d24df9981048a4730aa614
SHA1b7f0bc37d77649ee99fbba240dd4766a43ab7609
SHA256bc6637b98518a6002b83cf95ec2ab5b61ca2443962d939d038c19a6981ca4188
SHA512e9feff67c3dfe631c37dcfae139725f1f4ab0a969156ae99b1aef239a907ddcc4e8b0a3f3db3cd39fd046343e1bb35203e8720bdd1de0132b6ef7b0251a1f156
-
Filesize
1KB
MD5815d27fc3241ab1b7fe5fcafc93de3bc
SHA1c4dec5ef61b0e10f68bc2d96298c3746121b076e
SHA2561b6101bd7b80b3e4d647e2e18db2073b6b24e6315cf7e8640f536530de34e79a
SHA512ece750bdc885044dcbf4a532c42852e32e369dd7fd2cb28bbffdc698358a408ec8fad5622f0eb498f7bfe79b3e3a925b9415b57930493d70585b5cd601f104d9
-
Filesize
512B
MD58058dba4a697df2a551b72cd3e2117ee
SHA1400c47bca94e88dea185c92d0091b27e7540dbeb
SHA2561ba45cc562ceadd15a434fc9d045133060b55025b6bae30a0008eee26f950393
SHA5121da95d2594f03585342182927e820bf6416d3c5dff42706d7cb99bb23bf375e4f3b6c65f512ac3a336847209cf760e0124d90c64a0308d6cf01647935094e0a7
-
Filesize
1.9MB
MD580053a7abbddd6df18560e907330cc38
SHA1cab117a6054e1c28379e5a0ac8fedec57946a6ff
SHA256db388ac1c59bb2a7b7bdb0c176bbbcdcba0753b1907dc16f2ca9d5fcd153ac55
SHA512ba2a42f82dc984046bbd5f3d76f549c5181e64c4fbe42e4e67613f38c9e13406bc4ec3b3a09be6b1576201d346011a9a549f528265f6b3ed901ae57b1de17f49
-
Filesize
612B
MD55879d0f23de3ccb598efbc6304e4faf4
SHA1a91f889aac1fb81674640b5b54d36dd4f7f56e44
SHA256c9f3bc796527d773e5dcad55cbe74691c613f50941d4f00ec1dbfe8e0485167f
SHA51266eecbb56a9177dd9041695cf939bf2ccf3ec3df2263a28dc79a6e1541ef46d0218cb2793546e5b9bf2a8fac62bc706d152b2a37a6af5e0302968e81e316bc93
-
Filesize
908B
MD568bdf888bb351dbd7975248bf32ac77b
SHA117205f1b75eb2a1b4169e04d79c7dd3ca3d0e6a4
SHA2563a9f11094185dcec547d1cd9d6640a6e11ba26fca69777d7a8be764c0e216c24
SHA51223cf3183e62246b7006ec50d1c672697acc26418797bd65b361edef7df90d95fedaf751e26b55bbc4aa506ceddcebe820afcb42dbb5522297ecaa1ab9d6b0cfc
-
Filesize
912B
MD538ed246f7f9835d353e7bb1802b83ba2
SHA1c0df5e97dfd99f2d3f1974c7041860a898e3b698
SHA256a50c41c3dada15c999f9dbed78ccc14944be240b4fa38cec776613ce7050cdca
SHA512e7707fa290d5e799c67b466d53cde384151331368fdb0e7d6353fd422be42f9f9e47a8f3bf60048c309c057595952c75bbbc8a4b574987b2ce6bade61de88434
-
Filesize
1KB
MD5e3fece220c9c98d1bc5a352bdbd8e7c1
SHA11bbb24dd39a8d59d5beb1cb4b3fa1b27596fa85c
SHA2563b487eebd989e5b15dc7007ee370054e1c0962ad29cadc22c3f49d8993fbb91e
SHA5121a7e7a06dd4b5ead7b0f6dc5fa1cd7225a3012c0fd922acc6d0eb23314bfdb6bb67da14a28cff336696dfcd2b690fb1ae289b4aea266dd05394377962c92c04a
-
Filesize
1KB
MD55b90f73ec02c06ee9bb9dbe3fe9e6a8b
SHA152c11bc08ef62c0a4b0e863079c166482ead9b11
SHA25604ccb8aea12081672a411ea97f3299171fc16b8fe54ffcfe053483a41bd7ec7e
SHA512220bb09af85b28ca341c16299574629a507b666817adeff87271533e3b83430e6421fd6290b02f792130858c97713cccb0b7d816baedb20b8720cefa13781188
-
Filesize
1KB
MD5655c00100065a0d3d446a0f1dcb8a3d2
SHA1ea796e2fd53be7ef4954d540be53315b5e23bd9a
SHA25622f6f67bea47dc39fbf4923214f31ce644c7e8be5ba7e24e0b9ab7e32cd527d9
SHA512721b6935fbfb05f869cbda8639fb9ae44d80e30c910556f5635696f5ec5a000d48319f987eaf3014d99015fda3a2180d46d679f9c8e6ab03a9bf462a988284fe
-
Filesize
1KB
MD5995d33d6bc022e624154251dde987f9b
SHA115657fec31887b2277427c94876cfe071eb3544a
SHA256dcca012dc5c2d536aa439427c4c77327c2f6d752f2fc1fb2e130efd71dc081ea
SHA5122523f480f0e0f50a14b487e6136ab8f740e616354d8622882e00cac41211806321c77d6084a8008d562f74babbd336cfe248be62e3bfbd96a032463c08531a10
-
Filesize
5KB
MD59bf06cd276a81048c91bc2cb6eae76c1
SHA176ac360d39b5dad706015126484f0c0ae5da85b3
SHA2565a0501f6f3d29532ed149c92d35bbc94c5605f165ca65df03382a2907c69be85
SHA512e21e40c75f91bd8282e1aab3408ed9a960c75577d6ac8b63766f4ebbdd781e002d93d0ca85752098c86f3e4ae5228d72ea84397aa280cbc92d18575d67626165
-
Filesize
4KB
MD5689eb9d3d2a866648f68f76e6a8c3d46
SHA1ba65af36973bb4cb831868ec4882ce204bffb597
SHA2562a8c5af4b19e1144088ff271ec893e963a454107facb5f7155c2ec33cfa17b6a
SHA51298392c13983b1dea2b080c383bd26cae10b411360df2fe4192bef6c0958b5f6bbff98ad876d2edbd8bd771f0e8519ad9c3cc50ceff56afec569bdae864b14d83
-
Filesize
512B
MD53e822ce44c6645921c64606cdb4112bc
SHA1ca37411e7fccfcba2b573a790672173f81c1c2b2
SHA256065e84f6e490e319e79814419a62c71ba0d6f91b512e420d05db9ee539a784ae
SHA512a2f7c1221f566a63fa90a543655a14908ecd83eed2c557146b50ff45b8d6f74cb48708a24b270de394576b4a087f49941f45cc169987d48fe37e7db47c93ca52
-
Filesize
1.9MB
MD5e9603f7083b488be4a7e1c94cc7878c0
SHA14c10d03ce710d763bcc585a9e84b11f436fd5c23
SHA2569fee40a64fbac4113a52910351e4bfac9ff2a5df5c3291fe78a7d068716c17b6
SHA512ed64a7388d4b435dc340bd331ea7ab573c7b3d30c6c5bc909f14e1ee16d486628c9e5a608aff95ca1f816e752c1dc56f4a225820de405a0db94780c6c4bf0c5c
-
Filesize
908B
MD5fc6425a5eb60a239bc1c10adcb84a153
SHA179a8abbbcbcd3ff0952ebe97d8501f29bd5776ef
SHA256d3d0ef8ea4e0838e79ccf0e8c27eaad8877e006b12096a42257743bcc73419fc
SHA512031e05b20fb0c6f7a9436b5987191bce7289292a264926e54d5399b0e08e2d75c114ce3d97c2a54f948899e5e63a8ba58dc14cee8112fcd816a2620f22137827
-
Filesize
912B
MD5dbe31c393e14d2a69c6c1658ba193b13
SHA1dd9aae9d0ddc2a78ac8aa65e3a77ad0988833847
SHA256ba6e894df4bfda73be0c4180c9c4f635ff24fd957339c78a625df811f6976343
SHA512befcc5554fede9ce87d0c4945bd110017f8a05e576c86081be4f1eae3a4e6480e9091bd89699f002dea94432aa829e0aa7bbf02f0cf6128467a99a5914991783
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461