General
-
Target
Telegram.apk
-
Size
4.5MB
-
Sample
240701-gdywdaxera
-
MD5
1e85328c922ba2ea54bd518df785ea1d
-
SHA1
5db36e3690c54aa6d255d492d88208b810bd0602
-
SHA256
c0f044439068b23c7a1bb8a4018a4b9b47e4e097fd8f90f969fa1f7f3b64ecd6
-
SHA512
d49d92a8e9668cc82b07058ec522c90d3e17caced54025f5eef8ed4b24c413bebca8f7da4ced4d7a4c0f0e847e27e63f7d334c4db08bc97a70e3c95b60b310fa
-
SSDEEP
98304:H1OhpaC3+gwX/XMiLkG+XitiqFmzvzBUTS0tI5NwK4xl8B:wHD3dwX/8iApXyoziRgRJ
Behavioral task
behavioral1
Sample
Telegram.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
Telegram.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
Telegram.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Targets
-
-
Target
Telegram.apk
-
Size
4.5MB
-
MD5
1e85328c922ba2ea54bd518df785ea1d
-
SHA1
5db36e3690c54aa6d255d492d88208b810bd0602
-
SHA256
c0f044439068b23c7a1bb8a4018a4b9b47e4e097fd8f90f969fa1f7f3b64ecd6
-
SHA512
d49d92a8e9668cc82b07058ec522c90d3e17caced54025f5eef8ed4b24c413bebca8f7da4ced4d7a4c0f0e847e27e63f7d334c4db08bc97a70e3c95b60b310fa
-
SSDEEP
98304:H1OhpaC3+gwX/XMiLkG+XitiqFmzvzBUTS0tI5NwK4xl8B:wHD3dwX/8iApXyoziRgRJ
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC)
-
Requests enabling of the accessibility settings.
-