a91c218fd92b39c2c929b1a08400bc8e85df34a5d474dece920103a2c51675df

Login
Reports

Overview

overview

Static

static

Payload/Te...ts.pdf

macos-10.15-amd64

Payload/Te...gue.js

macos-10.15-amd64

Payload/Te...dle.js

macos-10.15-amd64

Payload/Te...x.html

macos-10.15-amd64

Payload/Te...rs.ps1

macos-10.15-amd64

Payload/Te....dylib

macos-10.15-amd64

Payload/Te...c.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...r.html

macos-10.15-amd64

Payload/Te...m.html

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ts.pdf

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...sionv1

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ts.pdf

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ity.js

macos-10.15-amd64

Payload/Te...ode.js

macos-10.15-amd64

Payload/Te...legram

macos-10.15-amd64

Payload/Te...h.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...rch.js

macos-10.15-amd64

Payload/Te...o.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...e.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...ute.js

macos-10.15-amd64

Payload/Te...le.ps1

macos-10.15-amd64

Payload/Te...hls.js

macos-10.15-amd64

Payload/Te...min.js

macos-10.15-amd64

Analysis

max time kernel
103s
max time network
104s
platform
macos-10.15_amd64
resource
macos-20260915-en
resource tags

arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
01/10/2026, 10:13

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/Assets.pdf

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/headless_prologue.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/index.bundle.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/index.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/LibprismaBundle.bundle/grammars.ps1

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Payload/Telegram.app/Frameworks/libswift_Concurrency.dylib

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Payload/Telegram.app/Generic.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Payload/Telegram.app/GenericUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Payload/Telegram.app/HLSVideoPlayer.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Payload/Telegram.app/Instagram.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Payload/Telegram.app/PlugIns/BroadcastUploadExtension.appex/BroadcastUploadExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Payload/Telegram.app/PlugIns/IntentsExtension.appex/Assets.pdf

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Payload/Telegram.app/PlugIns/IntentsExtension.appex/IntentsExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Payload/Telegram.app/PlugIns/NotificationContentExtension.appex/NotificationContentExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Payload/Telegram.app/PlugIns/NotificationServiceExtensionv1.appex/NotificationServiceExtensionv1

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Payload/Telegram.app/PlugIns/ShareExtension.appex/ShareExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Payload/Telegram.app/PlugIns/WidgetExtension.appex/Assets.pdf

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Payload/Telegram.app/PlugIns/WidgetExtension.appex/WidgetExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Payload/Telegram.app/Readability.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Payload/Telegram.app/ReaderMode.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Payload/Telegram.app/Telegram

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Payload/Telegram.app/Twitch.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Payload/Telegram.app/TwitchUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Payload/Telegram.app/UIWebViewSearch.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Payload/Telegram.app/Vimeo.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Payload/Telegram.app/VimeoUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Payload/Telegram.app/Youtube.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Payload/Telegram.app/YoutubeUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Payload/Telegram.app/anim_storymute.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Payload/Telegram.app/en.lproj/Localizable.ps1

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Payload/Telegram.app/hls.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Payload/Telegram.app/purify.min.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Report Analysis Logs

General

Target
Payload/Telegram.app/hls.js
Size 404KB
Sample261001-l9gn7aware
SHA256 a91c218fd92b39c2c929b1a08400bc8e85df34a5d474dece920103a2c51675df
MD5 079d6f8d4a390ab4968bbc05615dbb0d
SHA1 eee7afd62bd70dcf91f91816496fae11633e198a
SHA512 95a78ecb0011f2f79a2ee174a676def5a5e7645d0e858db955d5245607910d47b3739201d5756fa8d60048c1152e1da716f2c45ff312b711afa5a368547ea145
SSDEEP 6144:DXJwan4Io6kf2S+GqWS3zp8ph5GqHpjjOqJxSHjbnO9xaqpVF4:DZoRSGqWS3z8jH0qJx8IVF4
TLSH
T173943CED76A5A02642C2B165903F4607633A7D0A3409C1ACFA2BE9D75DB8D4DB03BF74
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/Telegram.app/hls.js\""
1⤵
PID:465

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/Telegram.app/hls.js\""
1⤵
PID:465

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Payload/Telegram.app/hls.js
1⤵
PID:465
- /bin/zsh
  /bin/zsh -c /Users/run/Payload/Telegram.app/hls.js
  2⤵
  PID:466
- /Users/run/Payload/Telegram.app/hls.js
  /Users/run/Payload/Telegram.app/hls.js
  2⤵
  PID:466
- /bin/sh
  sh /Users/run/Payload/Telegram.app/hls.js
  2⤵
  PID:466
- /bin/bash
  sh /Users/run/Payload/Telegram.app/hls.js
  2⤵
  PID:466

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads