General
- Target Telegram.exe
- Size 49.0MB
- Sample260809-wxrczatbre
- SHA256 7198a964e430a86a70b872ea35df58bb36e9490303d47b706d5fafaf73bffb8c
- MD5 ca094733ca4e0afd79a372688bdfc266
- SHA1 1652edb61bc0a3d3d2da237cdf9911c56921868b
- SHA512 c43fbe5219c2e4e9609609efe09ff2d88a3a9c7ae181ec2c0952a178c28aa48b9a7b66abde0b583542ca9e382af113d8fb104c2f493d10b8b2926dd68261edd7
- SSDEEP 1572864:GafOtfKp2pghuQ7DnnObOvkdul1ITQazszBqLlO:utfHyhemsTQaRLlO
- TLSH T130B7333BF287243DD0AA0B7ABDB68215597BBB5064428C5AD6F4C48CDF244B05E3E7D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Telegram.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Telegram.exe
- Size 49.0MB
- SHA256 7198a964e430a86a70b872ea35df58bb36e9490303d47b706d5fafaf73bffb8c
- MD5 ca094733ca4e0afd79a372688bdfc266
- SHA1 1652edb61bc0a3d3d2da237cdf9911c56921868b
- SHA512 c43fbe5219c2e4e9609609efe09ff2d88a3a9c7ae181ec2c0952a178c28aa48b9a7b66abde0b583542ca9e382af113d8fb104c2f493d10b8b2926dd68261edd7
- SSDEEP 1572864:GafOtfKp2pghuQ7DnnObOvkdul1ITQazszBqLlO:utfHyhemsTQaRLlO
- TLSH T130B7333BF287243DD0AA0B7ABDB68215597BBB5064428C5AD6F4C48CDF244B05E3E7D2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)