68cda4e62cf2ae7a4165181654ec2fab4966ebd7ad111a0060e1cb260f7e19a2

Sharing

Copy URL Twitter E-mail

General

Target
Telegram-v11-13-1.ipa
Size 61.4MB
Sample261001-l9gn7aware
SHA256 68cda4e62cf2ae7a4165181654ec2fab4966ebd7ad111a0060e1cb260f7e19a2
MD5 69a90c1f6dd75aab4a0dd35c933c5ac7
SHA1 d8efe78cae27d12942fe90d5aafe01357b4215a9
SHA512 a0460492406da07b4f70c26caa7cc6137dcd919dfa8debb4fcd8817602b4a57f2937a857f0c05841085d762cb664333df0129bd591d95682447f88bddce904fc
SSDEEP 1572864:9eTQeSBe2i6mav3Num7IcAml9D18jXwQzSGCIYEPbHLMvFM2Ku:cdSBew5j958jXwhGCpETgOtu
TLSH
T11EE733B6C6A54114DA1D407BA18FF2C2DC38AD423B63718E784CB7B7D77A60B327494A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

macos

Malware Config

Targets

- Target
  Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/Assets.car
- Size 113KB
- SHA256 304204255fe9a03e58a0538becf451f516cca15935788cb390d455f5d0f3d841
- MD5 e5b82e306749b0a5bccd36c05959363b
- SHA1 e5e316e39521ec73db22964cf758c68c0d967d77
- SHA512 ec2167228f803948baaa68d7a615e3f797be63090e1fb9c1c0fe69945044e01354c534bea0519958f29e13f06c97537fde70d5ac777e331851c6b5e06aa5bdd2
- SSDEEP 1536:RBJBB8Z4eu4scYfsOqI1PlPEkc4NkOEarPCAVKEovm/49+C8btWhrPFYELXHNX:T5lXPvYGrKl0f4hrPRLd
- TLSH
  T14CB37D15B398981EDC02C671815BBF545BB8F43217EFE943157C232D6E27258AE0BBB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/headless_prologue.js
- Size 682B
- SHA256 0046327cdbc99fed8b8c7593cc6aec052997dd82d4109162dbf9033e50232685
- MD5 a6ca44713acafdb0dd28d26e02028ef0
- SHA1 9af4d5b0af33859228f130af09b226438bb6755c
- SHA512 6455d6680ad5e96c4dfbaf09505bc5b4e46bf42579766e23cf44767fd0cdc02a9a3f858a15d0d36a30204ad939fd630f7a2188a90182f84e31eb0d706ea1a246
- TLSH
  T180016D10CDF904D9693B308EA9CF040330706BC37158FDA77DAE23148F8686885FA388
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral2
- Target
  Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/index.bundle.js
- Size 404KB
- SHA256 77f3923091ea2a320d8c11971672d579fa5d42ebd91ee0b9ce8f9473842a4d91
- MD5 79b30bcc12756a7c442a44a4baf559a4
- SHA1 657e91be1b3db0e6ed7dc87ed0a37fc55fb796f4
- SHA512 2e693c1485550df3b1ef141890673e39a3d45ac82e975c9315f0239a8a0202fda288d82736f50d31fc61ba1ce8cb897f5a763bfdbc2e7bd1c8639be283c5042f
- SSDEEP 6144:LVLKMhY48R2fzT+H3UcpY3erx9kOUqjxnnNVP9YR11mzbxSaSX:L9lpy+q3UIDx92qjxnEsFSBX
- TLSH
  T110944AE632E5942643D099C694358622A3387D0A3409C0ECFE7DADDB2D66D46F0BEF74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/index.html
- Size 207B
- SHA256 6caa8c5455f84f950ac11a39cf4820b2c5e0caa64d2ff274eda3304ac88d07f9
- MD5 fcc201aa33382922c02744c206dc8e97
- SHA1 1b62fe9a5213bdfa4d6f4ad4ab459daf671d9f89
- SHA512 90117d40db2b7bcae17d806f190ef39ec93525547841894103df8cc68076cc8721bd7cea0f454e0a7c933c831b2b84d122130206c9c6fef071f6b9521f461be1
- TLSH
  T19DD022D2D4A1442C422129744DA2B25C0A8DB814BB918C1028CAA6BC0CC8746A8AFA8C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral4
- Target
  Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/LibprismaBundle.bundle/grammars.dat
- Size 606KB
- SHA256 918a3483c60687f9b385f36cf87120f7dc9531455b9ebd3068a3c762b7777f59
- MD5 6057798d1024bb95976bbb9fc7fad449
- SHA1 75bed6237d467d54a708e9a67f709d5f3ab9afa1
- SHA512 548af1377f1c52505b03ff59cedd0589929eb9243503993dfd9fb571a97ecd7e3819ed7f073f22a3587c75a8487b1fd175737a87196b8a4a8051688811dc1e71
- SSDEEP 12288:ziFpKokb3mT+++8FFFg+++D+++wFFFb+++a+++H8QesvOi4evF5zzzzzzzozzzz2:ziFpKxb34+++8FFFg+++D+++wFFFb++Y
- TLSH
  T101D45C7E1736AEE1098623784854C6D4AA627854C0C9A07CF3B5E53DD1A0D0CA7A7FFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Payload/Telegram.app/Frameworks/libswift_Concurrency.dylib
- Size 407KB
- SHA256 918ee1ff05842e997c850a227bb313d7cc920d639583789d97bf394dbfe0b5e4
- MD5 dc61fa78ca7ac691663bfeaee691d7ee
- SHA1 49fcf62ef81eb0a964b5bfb34f84d9da338aaa43
- SHA512 915c6299e87ec587c9a45195110e60b189ff1e7d7d75d1b82ee69a8a9473b08ebd0036310a87ad69f83ee57156fa7b4af61a35aaa4a0f335a1df20742bf07f1f
- SSDEEP 6144:xBwZLMFdm0QTb9U36ExXIY4ZZ0uZ8m3yQqpTMNZZlGNSNX:xKZ70QTb9U36E5eb0bmiQgToZ8NSNX
- TLSH
  T160943942AE4C5D26D9C4B3FFA841D674703FB954872080E3B876692EEDF76F280166B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Payload/Telegram.app/Generic.html
- Size 909B
- SHA256 c53789b0fad5b9428de311c24a5b2e28f80d521315915693b11dc1bfa8ac2eed
- MD5 a125e40f2e43ad364895ba4c7bb27917
- SHA1 b50b26a04da3ed59c58804fe2221c9a5fa5a4349
- SHA512 6ee6c3584d37237c620be31f6893bc51c6fd374253af103433f28153d80944f70b86562d712f434482977932c85e1808abc40f2397322cd89f49e5f8af217eaf
- TLSH
  T1F511897B5AF38025A06361197AEA228C6936814777454E343DBEB9708FC6AD214137AE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7
- Target
  Payload/Telegram.app/GenericUserScript.js
- Size 666B
- SHA256 fc4febecf3fc7b6de0b00ad611639a17b97fc8af9ac9db43485853ddbc398483
- MD5 034ab8c740205e7af543a4a9bd92b91b
- SHA1 3ab14366d83497441f6878fc6d86abdf75a76c03
- SHA512 5b12394d9c0c7e86933a01916449cc159efb80231085efa590f6ac9040ec48c92df0ac90068ad5eabaf3bf97a21e4aacd55a74c0c91b544b2fbc661c8a1bce51
- TLSH
  T179014C5E94D33476595F112E7F9E700030645CA7024DEA41BD5DCDF11F94D602670BC9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral8
- Target
  Payload/Telegram.app/HLSVideoPlayer.html
- Size 5KB
- SHA256 73a2a4e7e3a065241f31595a343c8d6c6174f7faf6eb032147b391705926095c
- MD5 91ea18e43e1df463d354d521f034714a
- SHA1 2dc06b20b42263a2bee650e37f9640d76aa9e91a
- SHA512 d1c6dc94e9ecd502a219e8dbeb096ca130fb9b67569ecff2b67a3c9b1ad212821caf7de0acd95aeeb17e45faee710578cc3f511fce75867fd1ad9b27bdb0736d
- SSDEEP 96:9z1J1D7csKDNqSIT0s8FF3z+64F4Q8DHsfmylt0NNnN:9z13DS3FdCh+/8myDe/
- TLSH
  T196B1CB2D68FB9168C823F06D6FAF7108763247472009DE41BD8DA2485F5A62C95B4BFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Payload/Telegram.app/Instagram.html
- Size 1KB
- SHA256 1fcf0791f9c39c0116d87effec89048ece371e3980c969d74f5526dee3c0f477
- MD5 9f48ccd66d95b4ad835073eed7acce53
- SHA1 7e2ff8486e1454fa8b3624023994b9385cb42de0
- SHA512 8ce5fcd0f7dfe9f4ba9367d92175d1692cc7293883f5a82bbb0b5bd3b71d4622780e2cca23362e82e4fd89f26a953f597862b786ce24e578f396b80cab225f42
- TLSH
  T12C218C7AD5F262A4E43392697F5E2204293AC2571508DF203D7FB9B08F05E8A1857FED
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10
- Target
  Payload/Telegram.app/PlugIns/BroadcastUploadExtension.appex/BroadcastUploadExtension
- Size 170KB
- SHA256 ef975a0d5313261b1068d7709e6313a1e7984e99ee699ffd6d4096b4500a79f1
- MD5 4e3d4f7a724a7534cd14b67baca1bced
- SHA1 351bb64df07c3eab0f2285943b585001217a6a66
- SHA512 2f7dfaf610746d90e808c4965e42084fe1f0e54ad0eafa77aa1fc8b4b6ed93ae22e3f6d2537f51279b89ca095d1f4e9694d445fa38c41cfb289968155f8e1f1a
- SSDEEP 1536:Nk2yOcoY07/rOdtb6GtYDS8YRaRch/tRRKywv4ufwMRonf:ZH4ttiOFRsyCRonf
- TLSH
  T117042A67670C0B19C068633D84E493447731FA4667A2D3F47A8087ADDFEABA85C1B7D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Payload/Telegram.app/PlugIns/IntentsExtension.appex/Assets.car
- Size 27KB
- SHA256 74a8aa529666b1412527b18b3f9a86e2e6f90ad40192a0d621b03bd721195070
- MD5 7cc513198980ec006e6c094d6e289f77
- SHA1 5c76f5c0171f14d4aaf10e6833cc26d4b1b14099
- SHA512 7bf545506ac466e5cf895db0fb8453aa4678e9e1239aa64f4cccf2be7f2b3cdcc3a4751a0042e75d48d6946521fa295e0ba2cd9302b317a970064c1b147cdca9
- SSDEEP 96:QlVzn2EWEsQnrqGzbTsyYY6MC1mfxQGFRS5VXbT/yeTxLIJIllcTq/uK:rMqGzsjYaomgRSfbTdVcJIllcT4F
- TLSH
  T15FD25C42FB5D8C39CC0B8579D987FB4762E8F8160BC25903136C607EED52259F806EA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Payload/Telegram.app/PlugIns/IntentsExtension.appex/IntentsExtension
- Size 629KB
- SHA256 eceae5da28c48bf37abdb182fd36da58bc080ca0f42cef790e8d315e5cbe929d
- MD5 99ea79317514957e62c40bb4d27c3936
- SHA1 cb78b16e7316f6646bdda05c6bf817d216e85992
- SHA512 70e15c05d40a93a240ea24763f1f475e43b562ee6391d51266a9ce2fbb60e7672e1aa0014fb4befe74fa81d29a1f284c6f45829d2b3d3a42a316c85a719e5bdd
- SSDEEP 12288:DjqVO5b1IHWQABEfhYTMx4eq5xMcVjGKWs:DjhIeEfaMx4eq3L
- TLSH
  T1B5D48E42A74E1E29E1CAB37D6C5587A0723BF6A04730C3BD7D1262AFDF5A780513A271
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Payload/Telegram.app/PlugIns/NotificationContentExtension.appex/NotificationContentExtension
- Size 173KB
- SHA256 78321a68bb4ce0e04ac567b0498d7e340a01b0bd67d45f1b4d4a0091b45822e4
- MD5 12bf6a33518d362fade9b21a3d91e5ff
- SHA1 28e7d3e71f2bea6ef7252a0bcefa46482bb03013
- SHA512 3b147c998bab3da5e932afa972c8f6e0c5ea9346dbb47ada08aae5f704e08997152b059319849707c9985f9136663cb20ce68a0bcf6ed827a8c6c75803fb34d4
- SSDEEP 768:m021c+u9MiZw95iGqHNMcTN5PzDBls5hGUWEb04GotS7HpdkLqM9OUrknGmKDeyy:p+oMiZw95XqHNMyNV7s5hVWAS8eFtv
- TLSH
  T1F8040857771C1A56E0582378848483406332F759AF8793E5B966827CAFFB7B20C23BD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Payload/Telegram.app/PlugIns/NotificationServiceExtensionv1.appex/NotificationServiceExtensionv1
- Size 364KB
- SHA256 4168d33bde8e035e004f4d6a730f5e2141b3c8812bea22ce188eddd0d95cc6c7
- MD5 515b6c0d9eb115f52b3a511d0e210fda
- SHA1 de03b850f76a2afe3bd872ea5353c35361e1ca5c
- SHA512 f7c45865dab0332a279103f759a1674fd1b1451b5861b21f3491dd2963523ae759f36168679a868b26bdc3a3c8877b351dcd66a82de3994190730565a217131e
- SSDEEP 6144:d1OvrKbme9kNDSU4z4M5hfwXoC7mfMfERe:dQvrKbP95T4M04C7cM8Re
- TLSH
  T13C848D53F34C2D1AE099F27EBD00E390A136FB9066B5D3F8BE52516DDEAFB54800A611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Payload/Telegram.app/PlugIns/ShareExtension.appex/ShareExtension
- Size 315KB
- SHA256 dc642470941cbb6aff8847a0163d0b656789399a18d171f321714a25009437d8
- MD5 9bdcba6e1fb7c6f029e4de1b6c988c4e
- SHA1 36774565b0c1935a907a934630c58673419e7287
- SHA512 f6e610d1790350d7ef05841d9f87a8a297cd9fcb82b108e8d6e79291e15e70bf329a08530bc1c370b3675de66cf650cb2b4bf95224b8374e25d3335c080a2aa3
- SSDEEP 3072:jrIgR4/2rABYKgF/WiCnuUOKR457qzO92sckyW3oOXWaPXi0MgC:glAgYK2WiCuUeBoOaOXWaPXiZ
- TLSH
  T10E646B97734C1D16E0A9B33EAD30D304A431FA4517B2D3F4BE4255BECFAEB60512AA52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Payload/Telegram.app/PlugIns/WidgetExtension.appex/Assets.car
- Size 212KB
- SHA256 1cd408d66c92bb4cc230f56f8b9f7393422baf2b5fa8bfef7d0c08eacf53f01a
- MD5 be26e9bf2460a8e753cafb5b0b8d39f6
- SHA1 6f4a8d95945a0fdae904f44aba55f35b8335c557
- SHA512 c03a099c8c8954ed0ba58fea0acef2703da9aaa0c1b4fe7c5f4ecacf5ee5392c60a7f5f951b2fe4d74ca62e4099c01eed4ce5879b7343a863f58a105f9166833
- SSDEEP 3072:8YDLSYz4Izv44FIGN2YFOUGXK0mGrv2YJ7kFeq7kuLeh4nw/FBlls:87nIz0G8AEKJHq7kYMDLy4nw/F
- TLSH
  T1C124F141B798DD4EEC0296B58A4FFB449BACB02207DBD9934138226E1F1B154F887EB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Payload/Telegram.app/PlugIns/WidgetExtension.appex/WidgetExtension
- Size 709KB
- SHA256 03dc2af55f14ab2b8ae5a325f55502c94f6c10e986ddd5b4311c740bcd6fbb06
- MD5 e82d4ec5cb2f24672289cca0f405d407
- SHA1 b542c971cfa73b58401e5fdbb3b763dd267d4ca2
- SHA512 662976a2e4c141a2f58c7109b92093f90195351330c953ff4ccfc5f2abe7aa21e83b9954d9f6c63c22968d2c422f73e5e3f6ba7abb1767567fad4485c8bab1ae
- SSDEEP 12288:9DjPCNzLfjsHKWin22HSezf8XfzHPY+M4Ew8o0gsYkQcIUAM4Ew8o0gsYkQcIUAQ:heNzL7sHli2CiXzPYp
- TLSH
  T123F47C42B74D1E1AE1CAF27C9D865BA0613BFAA48730C3A97D07526FDE563C24039772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Payload/Telegram.app/Readability.js
- Size 87KB
- SHA256 6d21680e2553e5a36e01761115856ba2051401c84cd01d6edac0a15e315d88b9
- MD5 bc81aa6fdbfc488940b4995da3f5de80
- SHA1 fb80132ac3f18add710d66460e6c1f56707ef4bd
- SHA512 ab9988ac634eda155f76a1c3096a68b3c1c4d21edc9772b5e3e7212d1ac9892ad6f21da1c34dfa298a93575d30249259b2da2b08469ddffdc788e2fb200e1b93
- SSDEEP 1536:4IP/6m2QGE9X6V3OR7k1UouHemJydebxt1d1QGTl9gRnx4Rf/1xkHiYsPaQcPAaT:4+iZEl8OR7QUoqJyI3oRnaX1xkHi9iLV
- TLSH
  T16093A46A6AD607B66A0720382FEFB085B234801B564DDD547C8DD3CC1F88E7452F6BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Payload/Telegram.app/ReaderMode.js
- Size 22KB
- SHA256 2ccbc45bd814b5d56df728b3a9d7c91ebbfe8e87228cc2d9af7e4f60c41ac79d
- MD5 9e98f9bc9a21888a693d907f69476bd2
- SHA1 55192caaa818bdb8134f4f20e21838ce9eabbe8c
- SHA512 623ed230de34d333325c59042ed3736b3c2de188a8e8920b6288903186164ffe3bf9eab74b367b51dd8f788dbedb464133ae2b7ebcbe2bf860fc5d9e2845833e
- SSDEEP 384:JmG3NaPDRFJoKGv8glM9EI2tJ7BoLoNCkQ0ecGvbEoO/FpurcTWcDXjoA+sfRdu7:lY1grv8cM9EttJ7SLoNCkQ0ecGvbNO/w
- TLSH
  T1DEB229596C6079B65BDA01D920BB450D71BC101B300C84A0FBDDEDB45BBBAA96077F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Payload/Telegram.app/Telegram
- Size 137KB
- SHA256 65b61c78dd94f73d24c7a9429f20c3831063be30c996939479aa390a2f149390
- MD5 72f3ada03a7602793d1e7a15a9a5f6f5
- SHA1 830810cabc728dae262ecd4e21506767fd70b586
- SHA512 36cc2bf4c8cfe07073f0da6eaf29a4e3bb3eb2fda98be91f105e09bc1d0e265bb7895e272c1bd069dedb4383f287be23cbf4dce035300440fe45cfeca62e946d
- SSDEEP 384:Ojrx+CPDGTk983T+DB1FE9Ee2QSFBAm1SlNx+vgptRCC:Ojrx+CPDGTkHDPXe2dom14Nx+ARCC
- TLSH
  T157D31B5B978C1699E4C82174C5C45380227AF249B7D68359F1A2D57CBFBEFB20832B91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Payload/Telegram.app/Twitch.html
- Size 1KB
- SHA256 005a721364f24008ee1f3ba33d66fbc86b2af4ce3e336733de98b9d3e5653eb1
- MD5 c53c06f759c84e53ee3303b8e759dce6
- SHA1 bbc6ede7d5d22cd92fa3e4896549bdaa50f00165
- SHA512 15f799e24af01b7b8dd17e0c0a0ee571862a1b3e2a388d4aeeec5d8b3c193ae4a8433578d71053cc9a4b1be2f16bfe85637c461eb4bbcaa56760b04aa244fad6
- TLSH
  T10B219E6A59E35029A06760297BAB310C3936448772049E203DBDBAA08FD5AA71463B9D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral22
- Target
  Payload/Telegram.app/TwitchUserScript.js
- Size 3KB
- SHA256 9e5415d0e8056455887cbed71a4812c70288831248a80a908de6a4ad6f64ba70
- MD5 c5dc44ccd4289ac95b87660c1d99a99b
- SHA1 60aa21504cbbc0aab1ed80a0f5a1d2668719f3fe
- SHA512 a0877e3a9b492f35ef9731d9b7684f399e2cb023ca55068b93a48f9ba4fab0dbc523305ae0992bc43db49583d0faca0623fc056f1f1cebbaa77bc1d32c5bdfa1
- TLSH
  T17481B00E75E205B186AF653F2B3F9244367084171608FE427C2D9EF25FB0E6126B6BD9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23
- Target
  Payload/Telegram.app/UIWebViewSearch.js
- Size 5KB
- SHA256 cca0138921c6c677034a9195735b005353a70f22c114f8a42f6c1e7d212da409
- MD5 c3f9a02b07ead9df164ecbf6b3590e11
- SHA1 137aef56224611c1ee83dc81f27d190fe73a9c34
- SHA512 4d63a5590604fccfaadffa235ca6046667646d3c9914f5a36721a6293ec82a587da9032f8979173bfaa67f0cf8d254e33cd18de8412173bec7aa0f7478b0710a
- SSDEEP 96:q88BHc7FHcdQXXXHDW88788aXHfaQWpi46OX/JTcRA7cp6uOn7rVCydKt2gHcCcq:IBH+FHIQXXX4daXH4i0MmcInVCy82gHh
- TLSH
  T116C11048774B1570AEAB68EF1BBB96CCB7B86007A004D915788DC6495F70E6134EBEE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Payload/Telegram.app/Vimeo.html
- Size 3KB
- SHA256 8da176807da4bed1cfa8bee4d88442b2602a33183c62b1062e6c64ece0e4377b
- MD5 1ea9e5f57979aa383aed3380aaae61da
- SHA1 2ee1a4d0b5e28c923c8e7ded2be2340b77463bf4
- SHA512 f4fb2196db7e13a5e252c581ae4d267e3ef0d977479c26a2f2f524976a8c52422363376bf0aa7efb9f463eb79a034c5c1f1daa52a3908f66268781b7a307a848
- TLSH
  T113617C1E58E7A044A433B16A826F201839339103360ADF10BD6EF7945FAA637DD5AF9D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25
- Target
  Payload/Telegram.app/VimeoUserScript.js
- Size 1KB
- SHA256 98c508e38d61a771c1d801d27b23bbb7cf4656c437c83d3bf877052d91ca407d
- MD5 0632ece9c9a286ea8e7a3ab99cd915d2
- SHA1 643c695807a0b6174be9e856b35977c90a0a624c
- SHA512 a6a52ec41d3e6c309dc69e9c071cde2a4834fc6a47b51141c3d509aee5666d65b429b6a79413d8731fc35e7e42c209ddac1350c4523196f2852338e92bcb4432
- TLSH
  T12821BB5E64E328B2896F202D2F6EB04131B48497130CFA82BC1C9DF11FE0D7126B2BD9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral26
- Target
  Payload/Telegram.app/Youtube.html
- Size 3KB
- SHA256 86bbc454a0eeb7051b9ec14cbbae8b07e2b31d8052d570a4ee0528bed91b613f
- MD5 3a114fb8934f1f57df5eaa66739be75b
- SHA1 ac089c6cf0f18a1bd7d9b634ce2cd60ffda1903b
- SHA512 684f6629fcd46b86e19d0b84a2e3b2f0db573929300a14a0ef0f96f805e90417ca810cdfb98a9bc42d770f4e3e6af55d02f35dae113613bee3a96a2ccae0c783
- TLSH
  T10061112E19EB60509427F02D5B6F120835319243390ACF10BC1EFA549FA66575DAFFED
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27
- Target
  Payload/Telegram.app/YoutubeUserScript.js
- Size 2KB
- SHA256 0c705b61ae09f90f8b1e193f92327c1311bb841b5bcc0c55b70556542f79d939
- MD5 6af783302b8cfa96ac3a3c19a928ba54
- SHA1 0a8d3517885a37319afc373d9d12aff2c3f2f7b7
- SHA512 0ee460067c2e662dcfc37d31cc9ded0182d6765a850d9c50f9c9761fa2126a6bed4107428c1b9b2795717427e1cdb6dddf83b39c16fd7353bfd4c56688121b19
- TLSH
  T14251CF1EB9D6022625CF442F2BBE51453574400B870DF9423C2D98B68FB1E613AF9FDA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral28
- Target
  Payload/Telegram.app/anim_storymute.json
- Size 24KB
- SHA256 eb09aa6f6666be25eb75388c0491abd0201c435e60838a671a7aad6b001efaf5
- MD5 22bfa3e4aa691352952cb07d471890a0
- SHA1 276181551780ed56e086007fc8ec97c6d77ad751
- SHA512 8de9814c4934a15562ad1e8f1fd0afad573d8ec34c05c1da878c34d6614e676ce9f9c617051a24590db6a5161ced53b569fd84c3af4e4ed46bcab63f0affb93d
- SSDEEP 384:dotORk7+1xsoCX1Z07D20yiYYBkRq35BGA:+7+1xsoCX1Z0+inGRQJ
- TLSH
  T165B2395F8B634169B21578B057D731B04A769384DFCA8066BF6F8C229B4034F632AFB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Payload/Telegram.app/en.lproj/Localizable.strings
- Size 766KB
- SHA256 a7bee590b31ce7ea73618cf062ce30ada1d36eaf3b3fd416ae2777c3aef653b2
- MD5 16494923eed943271a0bd8d9cc9c195a
- SHA1 f2d850c8f2e3a3ac91c6d694bbb795d292b43ac5
- SHA512 cc84fef08dd5f7cbc0dd042425f1345043b3504e8631a984b22ccf23aa081a72d46f6ed29bc91b09f67353ce1e0c012d41a0ad3092123bd01b098bf8d7779345
- SSDEEP 6144:MkOBaR1WeJ0nLgMOyvRpZ3NPP6ej3yjUhpaz9p8WkQ5p08gKFwW40GRgW+l14YsG:HOZ5Xj3JPhjQlKHLOv9J3nXxO9uok
- TLSH
  T1D7F44BBFA645061947E3226B7EC63F515B355188922070399ADFA06F13EC6CCA7BB3C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Payload/Telegram.app/hls.js
- Size 404KB
- SHA256 a91c218fd92b39c2c929b1a08400bc8e85df34a5d474dece920103a2c51675df
- MD5 079d6f8d4a390ab4968bbc05615dbb0d
- SHA1 eee7afd62bd70dcf91f91816496fae11633e198a
- SHA512 95a78ecb0011f2f79a2ee174a676def5a5e7645d0e858db955d5245607910d47b3739201d5756fa8d60048c1152e1da716f2c45ff312b711afa5a368547ea145
- SSDEEP 6144:DXJwan4Io6kf2S+GqWS3zp8ph5GqHpjjOqJxSHjbnO9xaqpVF4:DZoRSGqWS3z8jH0qJx8IVF4
- TLSH
  T173943CED76A5A02642C2B165903F4607633A7D0A3409C1ACFA2BE9D75DB8D4DB03BF74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  Payload/Telegram.app/purify.min.js
- Size 20KB
- SHA256 c0845096a7c4a6741f362ac506c94c1c7d27dc603bcc1bf64a587f76f2dbe3a1
- MD5 fd4f07a2e5108be01d13a4f579ae5e55
- SHA1 577622c109b6fc8a27f50d43aaf4820eae02d6d9
- SHA512 8c1d1391305e402f594a406a0e17667d3bf5a9d7db5a9184ef6c89ff4d52aeaea1133648cf6c64cf57b9ee9f5a8bb21e1ccc041bb1e9cc6e8d769b428627f93e
- SSDEEP 384:JmG3NaPDRFJoKGv8glM9EI2tJ7BoLoNCkQ0ecGvbEoO/FpurcTWcDXjoA+sfRdu4:lY1grv8cM9EttJ7SLoNCkQ0ecGvbNO/P
- TLSH
  T11FA23A5A7D2079B65FDA01D920BB490D61BC101F300C84A0E7DEEDB454BBE9A6067F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32