6d21680e2553e5a36e01761115856ba2051401c84cd01d6edac0a15e315d88b9

Analysis

max time kernel
97s
max time network
113s
platform
macos-10.15_amd64
resource
macos-20260915-en
resource tags

arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
01/10/2026, 10:13

Target
Payload/Telegram.app/Readability.js
Size 87KB
Sample261001-l9gn7aware
SHA256 6d21680e2553e5a36e01761115856ba2051401c84cd01d6edac0a15e315d88b9
MD5 bc81aa6fdbfc488940b4995da3f5de80
SHA1 fb80132ac3f18add710d66460e6c1f56707ef4bd
SHA512 ab9988ac634eda155f76a1c3096a68b3c1c4d21edc9772b5e3e7212d1ac9892ad6f21da1c34dfa298a93575d30249259b2da2b08469ddffdc788e2fb200e1b93
SSDEEP 1536:4IP/6m2QGE9X6V3OR7k1UouHemJydebxt1d1QGTl9gRnx4Rf/1xkHiYsPaQcPAaT:4+iZEl8OR7QUoqJyI3oRnaX1xkHi9iLV
TLSH
T16093A46A6AD607B66A0720382FEFB085B234801B564DDD547C8DD3CC1F88E7452F6BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/Telegram.app/Readability.js\""
1⤵
PID:486

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/Telegram.app/Readability.js\""
1⤵
PID:486

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Payload/Telegram.app/Readability.js
1⤵
PID:486
- /bin/zsh
  /bin/zsh -c /Users/run/Payload/Telegram.app/Readability.js
  2⤵
  PID:487
- /Users/run/Payload/Telegram.app/Readability.js
  /Users/run/Payload/Telegram.app/Readability.js
  2⤵
  PID:487
- /bin/sh
  sh /Users/run/Payload/Telegram.app/Readability.js
  2⤵
  PID:487
- /bin/bash
  sh /Users/run/Payload/Telegram.app/Readability.js
  2⤵
  PID:487
- - /Applications
    /Applications /Library /System /Users /Volumes /bin /cores /dev /etc /home /opt /private /sbin /tmp /usr /var
    3⤵
    PID:488