eb09aa6f6666be25eb75388c0491abd0201c435e60838a671a7aad6b001efaf5

Login
Reports

Overview

overview

Static

static

Payload/Te...ts.pdf

macos-10.15-amd64

Payload/Te...gue.js

macos-10.15-amd64

Payload/Te...dle.js

macos-10.15-amd64

Payload/Te...x.html

macos-10.15-amd64

Payload/Te...rs.ps1

macos-10.15-amd64

Payload/Te....dylib

macos-10.15-amd64

Payload/Te...c.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...r.html

macos-10.15-amd64

Payload/Te...m.html

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ts.pdf

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...sionv1

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ts.pdf

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ity.js

macos-10.15-amd64

Payload/Te...ode.js

macos-10.15-amd64

Payload/Te...legram

macos-10.15-amd64

Payload/Te...h.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...rch.js

macos-10.15-amd64

Payload/Te...o.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...e.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...ute.js

macos-10.15-amd64

Payload/Te...le.ps1

macos-10.15-amd64

Payload/Te...hls.js

macos-10.15-amd64

Payload/Te...min.js

macos-10.15-amd64

Analysis

max time kernel
94s
max time network
112s
platform
macos-10.15_amd64
resource
macos-20260915-en
resource tags

arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
01/10/2026, 10:13

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/Assets.pdf

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/headless_prologue.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/index.bundle.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/index.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/LibprismaBundle.bundle/grammars.ps1

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Payload/Telegram.app/Frameworks/libswift_Concurrency.dylib

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Payload/Telegram.app/Generic.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Payload/Telegram.app/GenericUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Payload/Telegram.app/HLSVideoPlayer.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Payload/Telegram.app/Instagram.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Payload/Telegram.app/PlugIns/BroadcastUploadExtension.appex/BroadcastUploadExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Payload/Telegram.app/PlugIns/IntentsExtension.appex/Assets.pdf

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Payload/Telegram.app/PlugIns/IntentsExtension.appex/IntentsExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Payload/Telegram.app/PlugIns/NotificationContentExtension.appex/NotificationContentExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Payload/Telegram.app/PlugIns/NotificationServiceExtensionv1.appex/NotificationServiceExtensionv1

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Payload/Telegram.app/PlugIns/ShareExtension.appex/ShareExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Payload/Telegram.app/PlugIns/WidgetExtension.appex/Assets.pdf

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Payload/Telegram.app/PlugIns/WidgetExtension.appex/WidgetExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Payload/Telegram.app/Readability.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Payload/Telegram.app/ReaderMode.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Payload/Telegram.app/Telegram

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Payload/Telegram.app/Twitch.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Payload/Telegram.app/TwitchUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Payload/Telegram.app/UIWebViewSearch.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Payload/Telegram.app/Vimeo.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Payload/Telegram.app/VimeoUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Payload/Telegram.app/Youtube.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Payload/Telegram.app/YoutubeUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Payload/Telegram.app/anim_storymute.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Payload/Telegram.app/en.lproj/Localizable.ps1

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Payload/Telegram.app/hls.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Payload/Telegram.app/purify.min.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Report Analysis Logs

General

Target
Payload/Telegram.app/anim_storymute.js
Size 24KB
Sample261001-l9gn7aware
SHA256 eb09aa6f6666be25eb75388c0491abd0201c435e60838a671a7aad6b001efaf5
MD5 22bfa3e4aa691352952cb07d471890a0
SHA1 276181551780ed56e086007fc8ec97c6d77ad751
SHA512 8de9814c4934a15562ad1e8f1fd0afad573d8ec34c05c1da878c34d6614e676ce9f9c617051a24590db6a5161ced53b569fd84c3af4e4ed46bcab63f0affb93d
SSDEEP 384:dotORk7+1xsoCX1Z07D20yiYYBkRq35BGA:+7+1xsoCX1Z0+inGRQJ
TLSH
T165B2395F8B634169B21578B057D731B04A769384DFCA8066BF6F8C229B4034F632AFB5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/Telegram.app/anim_storymute.js\""
1⤵
PID:486

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/Telegram.app/anim_storymute.js\""
1⤵
PID:486

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Payload/Telegram.app/anim_storymute.js
1⤵
PID:486
- /bin/zsh
  /bin/zsh -c /Users/run/Payload/Telegram.app/anim_storymute.js
  2⤵
  PID:487
- /Users/run/Payload/Telegram.app/anim_storymute.js
  /Users/run/Payload/Telegram.app/anim_storymute.js
  2⤵
  PID:487
- /bin/sh
  sh /Users/run/Payload/Telegram.app/anim_storymute.js
  2⤵
  PID:487
- /bin/bash
  sh /Users/run/Payload/Telegram.app/anim_storymute.js
  2⤵
  PID:487

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads