8da176807da4bed1cfa8bee4d88442b2602a33183c62b1062e6c64ece0e4377b

Login
Reports

Overview

overview

Static

static

Payload/Te...ts.pdf

macos-10.15-amd64

Payload/Te...gue.js

macos-10.15-amd64

Payload/Te...dle.js

macos-10.15-amd64

Payload/Te...x.html

macos-10.15-amd64

Payload/Te...rs.ps1

macos-10.15-amd64

Payload/Te....dylib

macos-10.15-amd64

Payload/Te...c.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...r.html

macos-10.15-amd64

Payload/Te...m.html

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ts.pdf

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...sionv1

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ts.pdf

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ity.js

macos-10.15-amd64

Payload/Te...ode.js

macos-10.15-amd64

Payload/Te...legram

macos-10.15-amd64

Payload/Te...h.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...rch.js

macos-10.15-amd64

Payload/Te...o.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...e.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...ute.js

macos-10.15-amd64

Payload/Te...le.ps1

macos-10.15-amd64

Payload/Te...hls.js

macos-10.15-amd64

Payload/Te...min.js

macos-10.15-amd64

Analysis

max time kernel
87s
max time network
111s
platform
macos-10.15_amd64
resource
macos-20260915-en
resource tags

arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
01/10/2026, 10:13

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/Assets.pdf

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/headless_prologue.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/index.bundle.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/index.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/LibprismaBundle.bundle/grammars.ps1

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Payload/Telegram.app/Frameworks/libswift_Concurrency.dylib

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Payload/Telegram.app/Generic.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Payload/Telegram.app/GenericUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Payload/Telegram.app/HLSVideoPlayer.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Payload/Telegram.app/Instagram.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Payload/Telegram.app/PlugIns/BroadcastUploadExtension.appex/BroadcastUploadExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Payload/Telegram.app/PlugIns/IntentsExtension.appex/Assets.pdf

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Payload/Telegram.app/PlugIns/IntentsExtension.appex/IntentsExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Payload/Telegram.app/PlugIns/NotificationContentExtension.appex/NotificationContentExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Payload/Telegram.app/PlugIns/NotificationServiceExtensionv1.appex/NotificationServiceExtensionv1

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Payload/Telegram.app/PlugIns/ShareExtension.appex/ShareExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Payload/Telegram.app/PlugIns/WidgetExtension.appex/Assets.pdf

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Payload/Telegram.app/PlugIns/WidgetExtension.appex/WidgetExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Payload/Telegram.app/Readability.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Payload/Telegram.app/ReaderMode.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Payload/Telegram.app/Telegram

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Payload/Telegram.app/Twitch.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Payload/Telegram.app/TwitchUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Payload/Telegram.app/UIWebViewSearch.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Payload/Telegram.app/Vimeo.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Payload/Telegram.app/VimeoUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Payload/Telegram.app/Youtube.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Payload/Telegram.app/YoutubeUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Payload/Telegram.app/anim_storymute.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Payload/Telegram.app/en.lproj/Localizable.ps1

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Payload/Telegram.app/hls.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Payload/Telegram.app/purify.min.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Report Analysis Logs

General

Target
Payload/Telegram.app/Vimeo.html
Size 3KB
Sample261001-l9gn7aware
SHA256 8da176807da4bed1cfa8bee4d88442b2602a33183c62b1062e6c64ece0e4377b
MD5 1ea9e5f57979aa383aed3380aaae61da
SHA1 2ee1a4d0b5e28c923c8e7ded2be2340b77463bf4
SHA512 f4fb2196db7e13a5e252c581ae4d267e3ef0d977479c26a2f2f524976a8c52422363376bf0aa7efb9f463eb79a034c5c1f1daa52a3908f66268781b7a307a848
TLSH
T113617C1E58E7A044A433B16A826F201839339103360ADF10BD6EF7945FAA637DD5AF9D
MD5 SHA1 SHA512 TLSH

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/Telegram.app/Vimeo.html\""
1⤵
PID:487

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/Telegram.app/Vimeo.html\""
1⤵
PID:487

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Payload/Telegram.app/Vimeo.html
1⤵
PID:487
- /bin/zsh
  /bin/zsh -c /Users/run/Payload/Telegram.app/Vimeo.html
  2⤵
  PID:488
- /Users/run/Payload/Telegram.app/Vimeo.html
  /Users/run/Payload/Telegram.app/Vimeo.html
  2⤵
  PID:488
- /bin/sh
  sh /Users/run/Payload/Telegram.app/Vimeo.html
  2⤵
  PID:488
- /bin/bash
  sh /Users/run/Payload/Telegram.app/Vimeo.html
  2⤵
  PID:488

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:489

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:489

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads