General
- Target Telegram.exe
- Size 48.9MB
- Sample260715-e5mlbabw9r
- SHA256 ee4d2b8e61e848961ac2973212e4f251a3d2e2512c22af705ee392e84a137a05
- MD5 d2d29b2b8a723053f981b396c9fd08fb
- SHA1 735cbc9bcbcdab59c4b446147bdd26adee14385d
- SHA512 9cc09596f7f2a02ad1eafb78f84b2223257633b29f786c709fb4fad73c9286a3cae852039fe880c0e1a1f902a242e794b87d2ff69f3f3b8d693a8c7457471295
- SSDEEP 1572864:nDnphUQR9/Ry5KuPXRC5SfU6+SlGMhb/2O:nDpiaZv0r+Mb/2O
- TLSH T142B7333FB28F663DE13E4A367876D259053B7A50A49A8C06D7E4C49CCF644B0193F6E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Telegram.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Telegram.exe
- Size 48.9MB
- SHA256 ee4d2b8e61e848961ac2973212e4f251a3d2e2512c22af705ee392e84a137a05
- MD5 d2d29b2b8a723053f981b396c9fd08fb
- SHA1 735cbc9bcbcdab59c4b446147bdd26adee14385d
- SHA512 9cc09596f7f2a02ad1eafb78f84b2223257633b29f786c709fb4fad73c9286a3cae852039fe880c0e1a1f902a242e794b87d2ff69f3f3b8d693a8c7457471295
- SSDEEP 1572864:nDnphUQR9/Ry5KuPXRC5SfU6+SlGMhb/2O:nDpiaZv0r+Mb/2O
- TLSH T142B7333FB28F663DE13E4A367876D259053B7A50A49A8C06D7E4C49CCF644B0193F6E2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)