Resubmissions

02/09/2024, 08:57

240902-kwky1sxfjh 6

02/09/2024, 08:54

240902-kvdtbawgpk 6

General

  • Target

    sus_telegram.apk

  • Size

    74.1MB

  • MD5

    79006f8f37a8202c7c625f800aab9193

  • SHA1

    2e3b9c03de83edc041b60d649d138b2b896ea5fd

  • SHA256

    f6d41e04dc1065c2b322fccc3b762ebd960f3da1e5b4d10450b74ead80fd3760

  • SHA512

    6539d970cf65ae1b07c83d54349805a5dc31c94b614e00cf23130c536840504cd15f79f06b7442d20e0eb4039c32ae8557a81d30e51abe836466e61608936f7d

  • SSDEEP

    1572864:jEql8PPY10HewSDdydWZ4/xpdXjw/l72aR0WLwqr4IQGBPkn:jyHQ0xSBOWcxDglq1WLXrcCsn

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 4 IoCs
  • Requests dangerous framework permissions 22 IoCs

Files

  • sus_telegram.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    org.telegram.messenges

    org.telegram.ui.LaunchActivity


Android Permissions

sus_telegram.apk

Permissions

org.telegram.messenges_com.google.android.c2dm.permission.RECEIVE

org.telegram.messenges.permission.MAPS_RECEIVE

org.telegram.messenges_com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MEDIA_LOCATION

android.permission.CALL_PHONE

android.permission.FOREGROUND_SERVICE

android.permission.READ_CALL_LOG

android.permission.READ_CLIPBOARD

android.permission.BLUETOOTH_CONNECT

android.permission.INTERNET

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

android.permission.GET_ACCOUNTS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.MANAGE_ACCOUNTS

android.permission.READ_PROFILE

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_SYNC_SETTINGS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.USE_FINGERPRINT

android.permission.USE_BIOMETRIC

android.permission.INSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.CAMERA

android.permission.BLUETOOTH

android.permission.MANAGE_OWN_CALLS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_PHONE_NUMBERS

android.permission.POST_NOTIFICATIONS

org.telegram.messenges_com.sec.android.provider.badge.permission.READ

org.telegram.messenges_com.sec.android.provider.badge.permission.WRITE

org.telegram.messenges_com.htc.launcher.permission.READ_SETTINGS

org.telegram.messenges_com.htc.launcher.permission.UPDATE_SHORTCUT

org.telegram.messenges_com.sonyericsson.home.permission.BROADCAST_BADGE