Analysis
-
max time kernel
46s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
08-07-2024 12:55
Static task
static1
Behavioral task
behavioral1
Sample
TelegramMessenger_10.11.0_APKPure.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
TelegramMessenger_10.11.0_APKPure.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
TelegramMessenger_10.11.0_APKPure.apk
-
Size
72.6MB
-
MD5
355c0201f9c0a03f56c7da9d23c01016
-
SHA1
74716856bc3c5d0e756423538465d0bfa1355803
-
SHA256
e6fd901b425ec6955f3e7e1c17a9f00ed902c3dd30c098566dfc1d6116603f55
-
SHA512
ac315de53afc51fd81612522debf242558e487c656d9d1f692ec852ba06919284ec95fb98eadf950a727e9910fa9fa3f7fecacc5a10a1f91b92be5d36f63507a
-
SSDEEP
1572864:/EFgWJCK0EzbUqq+L0h7GldnkWd5fHYZWsKg6T40oq0wXQ0gj:Ma+f0Ezbzq+072SgJpZLoqtfgj
Malware Config
Signatures
-
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud org.telegram.messenger.web /dev/qemu_pipe org.telegram.messenger.web -
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
description ioc Process Framework service call android.accounts.IAccountManager.getAccountsAsUser org.telegram.messenger.web -
Reads the contacts stored on the device. 1 TTPs 2 IoCs
description ioc Process URI accessed for read content://com.android.contacts/raw_contacts org.telegram.messenger.web URI accessed for read content://com.android.contacts/contacts org.telegram.messenger.web -
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://media/external/images/media org.telegram.messenger.web -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock org.telegram.messenger.web -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo org.telegram.messenger.web -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver org.telegram.messenger.web -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo org.telegram.messenger.web
Processes
-
org.telegram.messenger.web1⤵
- Checks known Qemu pipes.
- Queries account information for other applications stored on the device
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:4271
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5f3a0d3490ca2a832bd544bfa2ff3ec92
SHA19a3ba42eedea2e52ebda0809c90d09e31ee69f22
SHA2564a896bfcceb36db94786943b0427759bfd3a968c0f3d31f37883b4a65064de1b
SHA512e4434c85fea166092d9f682f7c16adf0289ded669b0b016a58d9b919996cd06bf20bb088fd2ed49b16936476b3ef839d0f63ae45ccd7267b8dc6623413ed48cf
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
68KB
MD5d16a39cc2e115263fb428c4c93b71558
SHA16c412f9885e8e5cf6231318181c9b0271fcf5a08
SHA256dba5c044e73088ce9dcb368c77772e96017a936f34b5273f6c87e18bd29a5a17
SHA512a938f01375eac29d90ea64818693cec57a218690a22803f6d004917b9eb4345f50825a7bdefd99223d8ddbd4329729a2333d06a1f529ff295b0a612c442eb735
-
Filesize
567B
MD5613072e1f3ade25d706145b273d8128e
SHA1c4709e60d074a519fb327f71e4544e1301bc3b01
SHA25604d19fd2730b56158b62ef5a5863e6721f1a71b7b91c99b40baaa68114597830
SHA512ce6d7efd6117eda875e57d055ff4218ef7073ff8079b9e062bd69258e58b881dbbffc00c20cfa1a0ef54c711a1152c7f5edca26cd17ce52ebbdddaa55e69a05d
-
Filesize
90B
MD5561a0bb19419ce96de1f5995154f9b1f
SHA1c4154f653cb5d78feae6d405808bb15e57a4d086
SHA25635e338ab2c9dd51e85e4a4cdc65a5b0f2bfefa28c095f9349f0285f291285da9
SHA5120b19ddf09f002a6cd971fb75e94e636abd0b7ea98fed35965f5da03c16f0fcd241f28ad562a00dd9f465d9feb1cad0d3971a72e9c0eea0e9881647e9f00f32e8
-
Filesize
512B
MD504a3d59f60c3eb761cf84a7d6ade2807
SHA10aa5268fee5a0ac7297da2e2a8fd46870a35e746
SHA2565f365b0cd2d7d361f453f39890a1fde3fb6bae7f0826a2fdf48ed2da132e086b
SHA512fffd50d53cad6cb427a3ef8a2481ba95ffb2564f1594e6571c85280ba54ce4e9f2e26010def8f981cbc41104d525c622e06ae88e6113b1ca545bb5f1cc473def
-
Filesize
2.1MB
MD58ee56635cf78ea9829d5baa973b71707
SHA1ab2d119ee9937d1a31efe47183af8f6e0d5560d7
SHA25641b1871849857b9d64a3b04e624dde72f6e45f8a14b0d6f5ecffcead5b4164e4
SHA512d4d4294ab22d4be7b925ecca893814884c27fc5dc0c88ccef8037612c69ec5665995c31e9b6bd8960c2b069c2cb30ee3b1d0e0a2239f38e80c29d3ed86a4ac4e
-
Filesize
40B
MD5098b011c59a80daf15c048dfee00ff1f
SHA147963ffe950f64e4ab0d329f111f1ea61e1f72c6
SHA25687152114f80cd6a1b36e7649f2e54e18e347d15b45ca4245e1b2f20922a8f037
SHA5122caea2577cd87ab62be62621d976c650f14f063b6ef815d23f218b35b17354c95f2a56d595fce876750fcbb47ddbdfa844812e1218d77aa5249d85dd349e16c4
-
Filesize
612B
MD50d261c26783326f200280aaa43aa28b6
SHA122ddefac1f2aa43121fcd538b8f92895018e5216
SHA2560eb2d31d9fba4e14faed06cb688f8ea60d82dc6815b9f4de74770a9f6a79246d
SHA512c2b9d2e27a1beb13b2dc52903cc75793db84d7c47cfa71f5cc0fe207a179131d73c4e387b0ec0681a4c84985dcf1c2a2779e1510075028b2fa87cb6d7d4f2b3f
-
Filesize
908B
MD5b11ff69f032a02d26e0680ebdd90e9d4
SHA16f81695b358015d302ed547129708196e99fde6f
SHA256051d689a41fed3a68b682a7c28b7ce900d983ebcafe2742521169c8d9bef1e35
SHA5124356455bca2af304f83461b9f79ad3872466987856f0074fdaa503292f7130636bf4d3fb387a019b9240cf88bbc555709183bacc63866ac448023348215ec661
-
Filesize
912B
MD56609ffbdc295b1b3cd3e36ce6ab7afce
SHA15dfeb2706f6740f07b1082c393d129a70838310c
SHA2569683898bac5a817b9a99dc94a7a0ce6d84023c3759db5181bcb2a935067b10ef
SHA5129b3e11438dee4096a91a56cd284ed209bad79f80c1c97069811a81f69b2188ce33ca02f927a6c5ba9c2c13c5ebfb0389275c4f73e60a3de1b23a3f5a1ff3247f
-
Filesize
1KB
MD5fc33f2289260243616f514627b8603a3
SHA1919c602695999b56e589c34a25f47b722676a611
SHA256e8be95f363a7cf88fea40d110c8c8cf825d5fa8467606d813cff2b39a88f732b
SHA51242972b73c639cb2f8b1651a6b4d07f44c247827431509495b83cff3467057132fb024581660bee0701d21890e304e325d113b428328e4fa485948d01b4b92f8e
-
Filesize
1KB
MD58cbdb517ca08d364381333f32aefbcce
SHA12b980e2105969fc56ffc09bdc955d768306ab6ce
SHA25670b2933fd7a4191c15f5b93e953e2e2e86ca1eec8a674a92c8b89216d610d24e
SHA51264b004334ccf41700ef15fb0e848d07fa3b78f0d8c0057bc5aa3f34e9c52c96d1b14c8b3fdff820f95339aba0c4bdcfc4409e053a3b8815efb7ee810e50d4cb7
-
Filesize
1KB
MD54e88e36f26685aa8ae4142074be33a67
SHA159797de928ea0d3c7eee8ed5dd14030748f86fac
SHA25634c4d5ea38b16ba1150d12b188670bdf929a8ef0985b6f36f735f6b6e1914cf4
SHA512bbc7b79f857a84a6b7ff8694c16dda70d1e9a5c521669155b86c6cb78dcc83d95d9a19faf2384e30ffd30b3f696768e40eef04fc34ac442bf63c22853fa7cf28
-
Filesize
1KB
MD5b31aa87f265dfee7b1772d9a34d17490
SHA1a7bb4e35cd0f8168268c3cdd226c3046fa919068
SHA25624650439531620901019ea08ac67726085ff1f76f3440f75a328b15522297a3b
SHA5121973e3940f33039a1dd75c8c30ad7ae38b817ce97cfa30fafbb2f7dc24e391ba8382b2ea2eb129717e5637f47f0ff25d4e3f5e72c7f4069740191611005bc3ed
-
Filesize
512B
MD5d827527d5e68c2eb8be1f780096ea554
SHA1c4221a66d2bf06cc5e4f8474f65c78855ef24ccc
SHA256e90ae942fe9a857f44e4462fa47b5532718e22ccd96dcd58f93033edcaa65406
SHA51210da173b2fb149c6e96d62e0785f64305a1786ddb6832045e176b8442bd64464205f4068d88ccac6b1aa46ba0f03ba6ee0b3e3c03a993cfeff6adc37fae80b91
-
Filesize
2.1MB
MD5456c6a5258e366cc5f6d4df8909ef847
SHA1a959c8c57d93c0854bbe4f1d07e46841d88a1a50
SHA256993b129b0269cd73beb46f456c90cff8c61beba78060d3fd7794518dc2938c1b
SHA5120e407bcfdf3002c08335d37bc33823734d35510f49f7f3bce49eb3fb8a5c06fa831ada0cf2737ad757a9baeddb30977268e4fed75f3457b71eb7361cf4e95858
-
Filesize
612B
MD5afef0ca07b452a89c9a5b0295913b386
SHA1552a26fbfd86cdeb2a0f99346bd01c4a0ec99240
SHA25695f4aebf41233646375f707ccc7b353e367fea2afae6be77a8cb3f4c8421d551
SHA512e8135baa34572cf88cca2d94b971d3532af120141abc81692a52d553e95502e757d929fcddd8755cbbc9165a529bea1af79bd93fa1dad8fe63e03bac2236e798
-
Filesize
908B
MD5436323e21d1d767e46b68181893f2445
SHA17c329c88ef43ebe716d1cdbf68160095fca5f231
SHA2563396c9e421c0f7734cdc50bdc2c47801150826beb8a1405544823180c11ce2df
SHA5123c44a85e77494cf9ba5eedffedb84a892e3d1b77922118a4306bf62fbd4ac0f2686c3739eaeae641f168caaa207dc5ffb50dfc076ee26310aedd057040f614fc
-
Filesize
912B
MD55699dbe32d81cb1c030a623d3b436fcf
SHA17a0793ec53c599dffbeb75644b90e9eca40c8642
SHA256a89ab7d57d376a012d19aeb7b39824c08dea6ecf4c2d653289ebbd6b52ad6b5d
SHA512282932976bd2b9b65d2a70185b14414782ed6758a893f9031ebbdec4ef73b3c6194f44f935713a98b1d13820244973b5b74dcfe9d4b5e24e2876125ba7259bd1
-
Filesize
1KB
MD514d3a9ebced5cf19f25082d9a4b5919a
SHA1abe55aeb2d4c604fe1018c7524b6fa5c9fc23185
SHA2560d60f3f246097a21d8e34deb0fe7710a2080c8627b44cb107143362be9132c5d
SHA512b4a0de352d519148b434bbc8235e09ad4a74aa7639e09c4cd4e4325d562b34210ef4e24339f139d26fd1277e54582927b954659c5dcbce4ed23272d61436f247
-
Filesize
1KB
MD57dfd0e35ef6e70043c6e8dc011e2578f
SHA1248554ca06ef8ebea6eaf3cc1c66f28b539134c2
SHA25685f0f87c386cc2c5c58a994ae6d9c3e19df2edcbfdc3a7b274332bc16a58f7c9
SHA512539ecbebed3f4a237fb782b02a1a591edea21e3fff7414f32beddbea3c5916c2fae3a13533fa3aeb9c007360e72f4428826642784af597dd21eb697b821a2dc3
-
Filesize
1KB
MD59e5d7d1dbb71a3697a8f7386ef6935b1
SHA12e96d865288f3fff82bedec29c96c656878369f2
SHA25637ec902ecc67625ac8aec7b92f5bff90725604531babe0c3e5c19f5c43591007
SHA512053ecab5a8f6f0d8c57fe81fe0b12f81fb61ba4321f3d873726cce73f404741b4c671c1bfd0789adb7591287540d9617abd82c98a18fc8832bfd5c19c1f2781d
-
Filesize
1KB
MD567dcd509962a4b10f1e8f90a394af9a6
SHA1ff68d10bc466a36ed89453a8c3b534098fd0cf0b
SHA256d4a6786c851a6884c8682836d56127f50c0dfa3b106a6596f029300c48616c6a
SHA512bb60b1e2cefd92ac9502c51871288ee62e4db3c8289516f49d253fce78a5b22e0766901735c4e2c2c9b91775b360d895bbdb48a7a8e0f92413fdd4d1420194b2
-
Filesize
512B
MD5e52f39e53d74a1e975590249ee1dd87d
SHA134dc580c2fa1e1464dc26db9a6c41d2bb6bb5c7c
SHA25600eb6bc64db6630392556c7b603c60ad1fb51887fe8272c9184a1859c2523313
SHA512d84e06b8a6446a79a4bc614a3ffd5d630487b1e67811893d8065c76ef531e83003ef40a21c300293e277696f0e8cf4844f6bc43e267601f650c20ea3028c098b
-
Filesize
2.1MB
MD566e1466de7493266113052a73f734c34
SHA173baff6f602a746e88fe5dc6fc215a0ea2589757
SHA2562c21df75a7c5c045f12f6c8045b863779bc143690bd75c7e14544b63d5fb0d82
SHA5120467ab17b915e7bbbb976e7c6335cb5b05dd9d21bfa00cabf74ef7d8a15853750384bf506c1edd82766956025fac8b4a208db4970b81b4d11d2d97e790ed803d
-
Filesize
612B
MD5a49a2a7512e17a11ed32d47d856d2be3
SHA12ab49746cbacaaef1d22a8666189ff877e386543
SHA2564e7624b307df1dacdf36b7657757adf88054f96e42725021801c82459fad3e36
SHA512d170a74ea7c31a6bf25328f1e054a775a51644e281b14d46a8aa6dc5da60f2d8cfca51ba71dd0ecb9d8239261a2f83d8a666aa72e7863836278f17d552d572f9
-
Filesize
908B
MD5d0253eda83a90d7e2b8a1c83f731707f
SHA168928aea93500eaa07659a32a8df6ec44bafbbd5
SHA256facb59bb7f1e9d9ec842a9b57a18c709a05bcbd7950fcc4793e78de333c83012
SHA5122cb17bc199b2097b5e693ca3b4eb1032ff4fb1a2f9a38cec3e61bfe7b82cbc5c68f1cb290af76744df0c0c1db3e153966b0d73fbe6136042910662909324a4c2
-
Filesize
912B
MD51c725d91e29615d96e80061be4ebc969
SHA1bb5f48c093212b6a84ad97b1163ea5de6be01480
SHA2564009c05d86e7986df5b4e19e8e589aff0249c1295a78fc28599f7e8021714963
SHA512e1c5b60015b2197cf515d8b32e157cf1b7f260edd325877a3edf5e9c6184868e723afe340b0eb976a02d8756eebaeaa518267c30170be6fc4f562e6e3997260f
-
Filesize
1KB
MD5273d4a1e71c6dacc5be00d84db3aad42
SHA1bf2a5bb5a8d74363876a0b3dbc173d86d9163af9
SHA2560b623f42db60e629de77964f5fadcf4418ea65f376f40b7bd3d7a867bdcb3c1c
SHA512971952906dcc7bacb1e89882f694548fa03b1ac8075ffca34bd65b87cf6aa4ce5613167bd2ecaadf829563dd9da105c1d5f4b6617806b30b833fb79e08ac3b28
-
Filesize
1KB
MD5dc284df1bcf21ca977039b9a7ce9623d
SHA166bf86dc70ebaae79150b3f2528161f9963b34d5
SHA2564d32d1fdd1faecd87562e1a467dfc6940f0ecc60c673a7fce65cf04e04b0cdb1
SHA5124f087400c10848f1c72e0475cf3f53aeaeab35cfa15067c7c60404247744bbcb91ca726b1f12538f63504609a0ae5dbb7090607820f34f26bae8d282bee03823
-
Filesize
1KB
MD50619cd1a2041c4176f4c31c9bf8586a4
SHA172c5579a93e0cebeb2ef6c4b1ab0f030502a851a
SHA256727e90fe9293f01f18a2e534785b3c9f824db9c28491c006ab888f7bd183a4f4
SHA512fc3c35716402e001348d2f2ed734752bf7500ae11087509f0589169c1d81dee9e3e60a7b4b22a9faed882617f2f73d93705cd6f8e9337fa120d9d0af8d7d6b74
-
Filesize
1KB
MD5edaada7cd7e8b6c60165f87426897c6d
SHA19faf18f19e8da24ebae2cb15eb891e870a8e1888
SHA256a04243fb925eb638391f13f6e53c351a0b9c97dbfc01626d10f21bb03f43638a
SHA512d6b0f7721017315b192daa5483e74bf42a3169ca4eeaf1ea3cfa51a7ee8d95a783fe7aab57e1fdeaf9bcded1bc7e34f179a5390c2cae4336bd300523d43b0a8d
-
Filesize
5KB
MD5d4369613b827e02dccf6f597647cbf1d
SHA120a05edee6b1d543129f4d0cbf57fe7b2c5d4db0
SHA256ebbdda828dff50c92eadf086813bf9eb43df5fbc3581e4fa3fa1a87129fd8ac6
SHA512285a5bbbad021521be2f58c46e93e3d65335c2d2d09d6a7b9c4861ccd7b53cd82422a233097bbbd724d40728787472a86c6dd08023f34e16bf1ae6bf3dec67ba
-
Filesize
4KB
MD5689eb9d3d2a866648f68f76e6a8c3d46
SHA1ba65af36973bb4cb831868ec4882ce204bffb597
SHA2562a8c5af4b19e1144088ff271ec893e963a454107facb5f7155c2ec33cfa17b6a
SHA51298392c13983b1dea2b080c383bd26cae10b411360df2fe4192bef6c0958b5f6bbff98ad876d2edbd8bd771f0e8519ad9c3cc50ceff56afec569bdae864b14d83
-
Filesize
512B
MD5716f3ff6e2e7babd96f6c9eeef112730
SHA13491a2e82ead51a396ecfc7dfbcce3a288e07ce7
SHA2568e717cab079d6aed587321ac4b2b5cb8a453ea4839ba9672f2093723502d7e5e
SHA51215e082e438a9a9848c6b09069f0cc0bb82bb502a16a007313ace1a75c0e281d2bcdbf94ef9f41810d7a180770974c59b1156b0383090a9351869882cc9329b18
-
Filesize
2.1MB
MD5be2fbd6288d5f090621559f27e960887
SHA123f653bd9311fde2aa5ee9408ca9a63c906edd54
SHA25628df523c6cef840808a3e4ebf33f91675a288abd30d92ed5496b71bb65a4fc12
SHA512b30ba74c193ec29b48d8e42ca077813063136e95cd731713d91acaba8357472ee43ef549fd32b37eaa9ee15ff938e5d6952920e56a3f8e01f6ddd81aa3aeb0af
-
Filesize
908B
MD5bdadc256fd64ae786d8111554ec92dd3
SHA11d46cff5cc95dab86a067cd1990bda525d537b1b
SHA25642f3f35d31e208c6dd5e87d09e76960e754599faceecd5cf79c57fdd4b359d8e
SHA51216e95b3f1f92bf3746aa7ca10f0ff7ea6bfabe2d036d1cb104f4d96f850c1a98d1cb2172a759b509ae28a044c50f7e56b20c6842db04e25232b99e080d0ddf59
-
Filesize
912B
MD5b70d7ccf7de05e50c164c7cf5cb9f9f0
SHA16bed89d193147b521bfcc0862d403d27488a6621
SHA2564115f28b1bb7cca68ab67a8345b1600d28240a087e7f2bdcbb93cdcbc20fa147
SHA51267962603392256518c6ad373cfef35cd29508e48aa03ac18dd33bdefa8b3025dfae8dfff70c924d88858e34d8c32e089df139bb859a55ba5a800fa07ca7f686e
-
Filesize
1024B
MD50f343b0931126a20f133d67c2b018a3b
SHA160cacbf3d72e1e7834203da608037b1bf83b40e8
SHA2565f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
SHA5128efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461