General
- Target Telegram.apk
- Size 80.9MB
- Sample260416-e444zaax5t
- SHA256 9b5296a7fa877ae6b7f10259c18179f92d8fee1f1d6b422e1e7250161b4e74ed
- MD5 d07d5db60a11a0c7c7bc69a235d20650
- SHA1 2531f420481a5c6596b5b1a249c457073ac63b7b
- SHA512 ec514cb3747f431dc2301a4c3525acc606311f5cdede85a753b27184ae241a58d005ae7e75e1863271fec8330a7cf1eb1af146332033d7747ba4ce33ef809a96
- SSDEEP 1572864:Rbl84DS/9ykNSpFQ6brDx5hxB0bq97qvs9zfhNayiVm7iWEcif:lpy9apyUnx5Om9oszNfqmOGif
- TLSH T1501823E7F3304C3DDAB71536955D6072EA294E24D652A30F2408B63DBDB33E28A857E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Telegram.apk
Resource
android-33-x64-arm64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Telegram.apk
Resource
android-35-x64-arm64-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Telegram.apk
- Size 80.9MB
- SHA256 9b5296a7fa877ae6b7f10259c18179f92d8fee1f1d6b422e1e7250161b4e74ed
- MD5 d07d5db60a11a0c7c7bc69a235d20650
- SHA1 2531f420481a5c6596b5b1a249c457073ac63b7b
- SHA512 ec514cb3747f431dc2301a4c3525acc606311f5cdede85a753b27184ae241a58d005ae7e75e1863271fec8330a7cf1eb1af146332033d7747ba4ce33ef809a96
- SSDEEP 1572864:Rbl84DS/9ykNSpFQ6brDx5hxB0bq97qvs9zfhNayiVm7iWEcif:lpy9apyUnx5Om9oszNfqmOGif
- TLSH T1501823E7F3304C3DDAB71536955D6072EA294E24D652A30F2408B63DBDB33E28A857E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the contacts stored on the device.
-
Reads the content of photos stored on the user's device.
-
Acquires the wake lock
-
Queries information about active data network