General
-
Target
Telegram.apk
-
Size
4.5MB
-
Sample
240628-3hn3maybkn
-
MD5
7b87f27dfdcb9aabf2b4984af0129678
-
SHA1
d7a15908407337d14d6f2fc6389a7fc041d1973f
-
SHA256
a8d514bdbc37ce837729f98e0649c432ca50835fd151198c132cfbd479bfe16d
-
SHA512
891ce9c29f580cd3e379083b182e68c0384d1688fac74452eeda60ac28f7999ccf44f9abc6869862e35d409f39bbbcbdc42800b08f8c2b96046bab8c60a3e222
-
SSDEEP
98304:6POw/7MXBujxfIUT9L2MmzvzBwTE0tk5NwWYNmyu:6WwzMxAf156bz230h3
Behavioral task
behavioral1
Sample
Telegram.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral2
Sample
Telegram.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral3
Sample
Telegram.apk
Resource
android-33-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
Telegram.apk
Resource
android-x86-arm-20240624-en
Malware Config
Targets
-
-
Target
Telegram.apk
-
Size
4.5MB
-
MD5
7b87f27dfdcb9aabf2b4984af0129678
-
SHA1
d7a15908407337d14d6f2fc6389a7fc041d1973f
-
SHA256
a8d514bdbc37ce837729f98e0649c432ca50835fd151198c132cfbd479bfe16d
-
SHA512
891ce9c29f580cd3e379083b182e68c0384d1688fac74452eeda60ac28f7999ccf44f9abc6869862e35d409f39bbbcbdc42800b08f8c2b96046bab8c60a3e222
-
SSDEEP
98304:6POw/7MXBujxfIUT9L2MmzvzBwTE0tk5NwWYNmyu:6WwzMxAf156bz230h3
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests enabling of the accessibility settings.
-