General

  • Target

    TelegramDesktop.rar

  • Size

    44.5MB

  • MD5

    8e3f4ea3aad39b6388fdc54d8fd5bb44

  • SHA1

    8044faa59bdf42e258ab92e503e0e1562de5aac4

  • SHA256

    b0aa728911ccab0b22380e388e032ac6cc98e5a51962e25ace33dd21088d52d3

  • SHA512

    6e5ca2e6989383b5c697e78725111c60b6e02cfa1cd8247ed6c99b9ddb81d9091bfc3be08b0718dd2f3479f31b94d3e5982a749f319e57b7344d0205cf5c60cd

  • SSDEEP

    786432:JcCNgBH8GXQv12GQs1hp3I8RGZaIWXE0oZj4n5qG830WDN0TSaPay:JtgBE1DQI3HRGZaIGE08VGlQ02aPay

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • TelegramDesktop.rar
    .rar
  • Telegram.exe
    .exe windows:6 windows x64 arch:x64

    5bb66f7fd0a83fa678d005ce1b76c56c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Updater.exe
    .exe windows:6 windows x64 arch:x64

    f0174d7d7095e01db026708ff16cd0aa


    Code Sign

    Headers

    Imports

    Sections

  • log.txt
  • unins000.dat
  • unins000.exe
    .exe windows:6 windows x86 arch:x86

    8507116e3d0e7e02e36e7dc5b8aa1af8


    Headers

    Imports

    Exports

    Sections