General

  • Target

    tportable-x64.5.2.0.zip

  • Size

    54.0MB

  • MD5

    dc8086e9982bba4d3dbb26bedd98b4ff

  • SHA1

    9c9bb430753857b47693ec4a76844d344a8cd6af

  • SHA256

    288641760f4a67d11c865417e7d4cd52d65067f100b04d3b76c73695fad08a2f

  • SHA512

    162bcf2a38a85590a8e8ee5150c2b47e9f9c85f888056bd674eed6985a253c03b9c69a56db9355ed89fe7ccc39c46ad64083a21336c7a3a7b7af81c90849ecc8

  • SSDEEP

    1572864:DWBXcWMYgTj41eKrLIJtEVksd2jEjFt3qRNAdhZ9XkDB:yVcWMP81emoLs2kL3u4hQF

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

Files

  • tportable-x64.5.2.0.zip
    .zip
  • Telegram/Telegram.exe
    .exe windows:6 windows x64 arch:x64

    5a9524265ef3f268397f154cebef8a27


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Telegram/modules/x64/d3d/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections