c53789b0fad5b9428de311c24a5b2e28f80d521315915693b11dc1bfa8ac2eed

Login
Reports

Overview

overview

Static

static

Payload/Te...ts.pdf

macos-10.15-amd64

Payload/Te...gue.js

macos-10.15-amd64

Payload/Te...dle.js

macos-10.15-amd64

Payload/Te...x.html

macos-10.15-amd64

Payload/Te...rs.ps1

macos-10.15-amd64

Payload/Te....dylib

macos-10.15-amd64

Payload/Te...c.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...r.html

macos-10.15-amd64

Payload/Te...m.html

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ts.pdf

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...sionv1

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ts.pdf

macos-10.15-amd64

Payload/Te...ension

macos-10.15-amd64

Payload/Te...ity.js

macos-10.15-amd64

Payload/Te...ode.js

macos-10.15-amd64

Payload/Te...legram

macos-10.15-amd64

Payload/Te...h.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...rch.js

macos-10.15-amd64

Payload/Te...o.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...e.html

macos-10.15-amd64

Payload/Te...ipt.js

macos-10.15-amd64

Payload/Te...ute.js

macos-10.15-amd64

Payload/Te...le.ps1

macos-10.15-amd64

Payload/Te...hls.js

macos-10.15-amd64

Payload/Te...min.js

macos-10.15-amd64

Analysis

max time kernel
146s
max time network
111s
platform
macos-10.15_amd64
resource
macos-20260915-en
resource tags

arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
01/10/2026, 10:13

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/Assets.pdf

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/headless_prologue.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/index.bundle.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/HlsBundle.bundle/index.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Payload/Telegram.app/Frameworks/TelegramUIFramework.framework/LibprismaBundle.bundle/grammars.ps1

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Payload/Telegram.app/Frameworks/libswift_Concurrency.dylib

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Payload/Telegram.app/Generic.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Payload/Telegram.app/GenericUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Payload/Telegram.app/HLSVideoPlayer.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Payload/Telegram.app/Instagram.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Payload/Telegram.app/PlugIns/BroadcastUploadExtension.appex/BroadcastUploadExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Payload/Telegram.app/PlugIns/IntentsExtension.appex/Assets.pdf

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Payload/Telegram.app/PlugIns/IntentsExtension.appex/IntentsExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Payload/Telegram.app/PlugIns/NotificationContentExtension.appex/NotificationContentExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Payload/Telegram.app/PlugIns/NotificationServiceExtensionv1.appex/NotificationServiceExtensionv1

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Payload/Telegram.app/PlugIns/ShareExtension.appex/ShareExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Payload/Telegram.app/PlugIns/WidgetExtension.appex/Assets.pdf

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Payload/Telegram.app/PlugIns/WidgetExtension.appex/WidgetExtension

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Payload/Telegram.app/Readability.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Payload/Telegram.app/ReaderMode.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Payload/Telegram.app/Telegram

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Payload/Telegram.app/Twitch.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Payload/Telegram.app/TwitchUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Payload/Telegram.app/UIWebViewSearch.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Payload/Telegram.app/Vimeo.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Payload/Telegram.app/VimeoUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Payload/Telegram.app/Youtube.html

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Payload/Telegram.app/YoutubeUserScript.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Payload/Telegram.app/anim_storymute.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Payload/Telegram.app/en.lproj/Localizable.ps1

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Payload/Telegram.app/hls.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Payload/Telegram.app/purify.min.js

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Report Analysis Logs

General

Target
Payload/Telegram.app/Generic.html
Size 909B
Sample261001-l9gn7aware
SHA256 c53789b0fad5b9428de311c24a5b2e28f80d521315915693b11dc1bfa8ac2eed
MD5 a125e40f2e43ad364895ba4c7bb27917
SHA1 b50b26a04da3ed59c58804fe2221c9a5fa5a4349
SHA512 6ee6c3584d37237c620be31f6893bc51c6fd374253af103433f28153d80944f70b86562d712f434482977932c85e1808abc40f2397322cd89f49e5f8af217eaf
TLSH
T1F511897B5AF38025A06361197AEA228C6936814777454E343DBEB9708FC6AD214137AE
MD5 SHA1 SHA512 TLSH

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/Telegram.app/Generic.html\""
1⤵
PID:486

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Payload/Telegram.app/Generic.html\""
1⤵
PID:486

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Payload/Telegram.app/Generic.html
1⤵
PID:486
- /bin/zsh
  /bin/zsh -c /Users/run/Payload/Telegram.app/Generic.html
  2⤵
  PID:487
- /Users/run/Payload/Telegram.app/Generic.html
  /Users/run/Payload/Telegram.app/Generic.html
  2⤵
  PID:487
- /bin/sh
  sh /Users/run/Payload/Telegram.app/Generic.html
  2⤵
  PID:487
- /bin/bash
  sh /Users/run/Payload/Telegram.app/Generic.html
  2⤵
  PID:487

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads