General
- Target Telegram.apk
- Size 77.9MB
- Sample260511-vgcdfaaw6l
- SHA256 fa2b7e1a7f4a1b2318b3a1f15078aad643df134a8980f724b61b69d1b354b535
- MD5 9cd8a80f3f51a78e28b1c35b5e95837b
- SHA1 370065c77ccae913ebeb12f4b7e0c7ee47aee90f
- SHA512 80eff986bfd528914451f57f39df049ec323cf9bb747e6d8a9b9babb13360f39cd9693b1a608a5a4ad97f17168d4a0e7f5ace2be55066f54b880a716a12ec660
- SSDEEP 1572864:xeb5jSodG3g4ByU8JySrMZBS7d8n4Doukzux3pK9CRE15qUPV1h9ostgk62K7WO1:Uzgw4ByUcyfS7d8mzxc9CO15qUPVb9oz
- TLSH T1C80823EBF3306C2EE9731571566D2472A6284F209702E32F640DBA2D79733F25A45BE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Telegram.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Telegram.apk
- Size 77.9MB
- SHA256 fa2b7e1a7f4a1b2318b3a1f15078aad643df134a8980f724b61b69d1b354b535
- MD5 9cd8a80f3f51a78e28b1c35b5e95837b
- SHA1 370065c77ccae913ebeb12f4b7e0c7ee47aee90f
- SHA512 80eff986bfd528914451f57f39df049ec323cf9bb747e6d8a9b9babb13360f39cd9693b1a608a5a4ad97f17168d4a0e7f5ace2be55066f54b880a716a12ec660
- SSDEEP 1572864:xeb5jSodG3g4ByU8JySrMZBS7d8n4Doukzux3pK9CRE15qUPV1h9ostgk62K7WO1:Uzgw4ByUcyfS7d8mzxc9CO15qUPVb9oz
- TLSH T1C80823EBF3306C2EE9731571566D2472A6284F209702E32F640DBA2D79733F25A45BE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
Queries the phone number (MSISDN for GSM devices)
Reads the contacts stored on the device.
Reads the content of photos stored on the user's device.
Acquires the wake lock
Queries information about active data network