General
- Target Telegram_12.6.5_APKPure.apk
- Size 47.8MB
- Sample260522-qccq7aet4t
- SHA256 7d44e0009d251ae4983f5bf29f7d8aa9af668df88dba05a17a7a314f6780ceff
- MD5 78336a1c63ba008af99fd984ef8f2775
- SHA1 d0953b36a6e6e09fbd7d93c07921ab2eecaf23b7
- SHA512 967be2c70382171bab52699252b3d184a0934162547a22f3d4c66f230a70920b8d0bca3829fdc1c22804fcb9c04034764feaa126f0ac0133e45ed42bc73b593f
- SSDEEP 786432:9gbPI+gXH1HYKCSxzQTDvrjQlCNwibgQIaYLc9wlMZd7Km7HLegrEvMKdN3kA32Z:GbVgl/YvElYwWItg9gMZ8m7iWEriIfdC
- TLSH T142B712E7F3315C3DD9770532966D6071EA284F24D622A30F2409B63EB9B33D68A857E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Telegram_12.6.5_APKPure.apk
Resource
android-x64-arm64-20260325-en
8 signatures
900 seconds
Behavioral task
behavioral2
Sample
Telegram_12.6.5_APKPure.apk
Resource
android-33-x64-arm64-20260325-en
8 signatures
900 seconds
Malware Config
Targets
-
- Target Telegram_12.6.5_APKPure.apk
- Size 47.8MB
- SHA256 7d44e0009d251ae4983f5bf29f7d8aa9af668df88dba05a17a7a314f6780ceff
- MD5 78336a1c63ba008af99fd984ef8f2775
- SHA1 d0953b36a6e6e09fbd7d93c07921ab2eecaf23b7
- SHA512 967be2c70382171bab52699252b3d184a0934162547a22f3d4c66f230a70920b8d0bca3829fdc1c22804fcb9c04034764feaa126f0ac0133e45ed42bc73b593f
- SSDEEP 786432:9gbPI+gXH1HYKCSxzQTDvrjQlCNwibgQIaYLc9wlMZd7Km7HLegrEvMKdN3kA32Z:GbVgl/YvElYwWItg9gMZ8m7iWEriIfdC
- TLSH T142B712E7F3315C3DD9770532966D6071EA284F24D622A30F2409B63EB9B33D68A857E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
Queries the phone number (MSISDN for GSM devices)
Reads the contacts stored on the device.
Reads the content of photos stored on the user's device.
Acquires the wake lock
Queries information about active data network