Abstract

The distribution of illegal digital content, such as pirated mobile games, through instant messaging applications has become a serious threat to digital security and copyright protection. Telegram, as one of the most widely used messaging platforms, is frequently exploited by perpetrators to distribute APK files on a massive scale through public channels due to inadequate moderation mechanisms. This study aims to analyze the distribution of pirated mobile games on the Telegram platform using a digital forensic approach based on the National Institute of Standards and Technology (NIST) framework. Data were collected through a simulated distribution of pirated APK files on a rooted Android device. The extraction and analysis processes were conducted using MOBILedit Forensic Express and Magnet AXIOM forensic software. The forensic investigation successfully identified and extracted significant artifacts, including the pirated APK file (minecraft-1-21-130 (1).apk), public channel URL access history, Telegram user identity metadata, and application execution traces on the device. Cross-verification results from both forensic tools demonstrated that the NIST framework is effective in reconstructing the incident chronology and presenting valid, objective, and accountable digital evidence.

References

• Rizky Febriansyah, “Dampak Kemajuan Teknologi Informasi dan Komunikasi terhadap Nilai-Nilai Budaya,” Venus: Jurnal Publikasi Rumpun Ilmu Teknik , vol. 3, no. 1, pp. 01–10, Jan. 2025, doi: 10.61132/venus.v3i1.687.
• H. T. W. Visa and M. T. Multazam, “Legal Obligations of Telegram Users Regarding Copyrighted Content Distribution in Public Groups,” Indonesian Journal of Law and Economics Review, vol. 19, no. 2, May 2024, doi: 10.21070/ijler.v19i2.1011.
• S. S. Roy, E. P. Vafa, K. Khanmohammadi, and S. Nilizadeh, “DarkGram: A Large-Scale Analysis of Cybercriminal Activity Channels on Telegram,” arXiv preprint, Sep. 2024.
• M. Elizabeth Sutrahitu, S. Selfina Kuahaty, and A. Balik, “Perlindungan Hukum Pemegang Hak Cipta terhadap Pelanggaran Melalui Aplikasi Telegram,” TATOHI: Jurnal Ilmu Hukum, vol. 10, no. 5, pp. 346–355, 2021, doi: 10.47268/tatohi.v1i4.611.
• D. Mutiara Syafitri and F. Fachri, “Analisis Forensik Digital Telegram Pada Android Untuk Cybercrime Dengan Kerangka Nasional Institute Of Standard Technology (NIST),” Rabit : Jurnal Teknologi dan Sistem Informasi Univrab, vol. 10, no. 1, pp. 41–50, Jan. 2025, doi: 10.36341/rabit.v10i1.5402.
• N. Iman, A. Susanto, and R. Inggi, “Analisa Perkembangan Digital Forensik dalam Penyelidikan Cybercrime di Indonesia (Systematic Review),” Jurnal Telekomunikasi dan Komputer, vol. 9, no. 3, p. 186, Jan. 2020, doi: 10.22441/incomtech.v9i3.7210.
• T. Ruslan, I. Riadi, and S. Sunardi, “Analisis Forensik Digital Pada Whatsapp Dan Facebook Menggunakan Metode NIST,” JURNAL FASILKOM, vol. 13, no. 02, pp. 286–292, Aug. 2023, doi: 10.37859/jf.v13i02.5540.
• Imam Riadi, Abdul Fadlil, and Muhammad Immawan Aulia, “Investigasi Bukti Digital Optical Drive Menggunakan Metode National Institute of Standard and Technology (NIST),” Jurnal RESTI (Rekayasa Sistem dan Teknologi Informasi), vol. 4, no. 5, pp. 820–828, Oct. 2020, doi: 10.29207/resti.v4i5.2224.
• S. Azizah, S. A. Ramadhona, and K. W. Gustitio, “Analisis Bukti Digital pada Telegram Messenger Menggunakan Framework NIST,” REPOSITOR, vol. 2, no. 10, pp. 1400–1405, 2020.
• M. Prasetio, U. A. Dahlan, and I. Riadi, “Investigation Telegram based-on Web using National Institute of Standards and Technology Method,” 2022.
• W. O. Rini, T. D. Hariyana, and I. Makhali, “Pengunggahan Ulang Video Perfilman Indonesia Secara Ilegal Melalui Public Channel Telegram,” Yustitiabelen, vol. 8, no. 2, pp. 118–142, Aug. 2022, doi: 10.36563/yustitiabelen.v8i2.495.
• N. A. I. Maniar and T. Yuniati, “Implementasi Mobile Forensic Pada Aplikasi MiChat Dan Telegram Dengam Framework NIST 800-101,” Cyber Security dan Forensik Digital, vol. 5, no. 2, pp. 60–65, Jan. 2023, doi: 10.14421/csecurity.2022.5.2.3764.
• I. Riadi, H. Herman, and N. H. Siregar, “Forensik Mobile Pada Kasus Cyber Fraud Layanan Signal Messenger Menggunakan Metode NIST,” JOINTECS (Journal of Information Technology and Computer Science), vol. 6, no. 3, p. 137, Sep. 2021, doi: 10.31328/jointecs.v6i3.2591.
• R. Rahmansyah, “Perbandingan Hasil Investigasi Barang Bukti Digital Pada Aplikasi Facebook Dan Instagram Dengan Metode NIST,” Cyber Security dan Forensik Digital, vol. 4, no. 1, pp. 49–57, Jun. 2021, doi: 10.14421/csecurity.2021.4.1.2421.
• D. Hariyadi, M. W. Indriyanto, and M. Habibi, “Investigasi Dan Analisis Forensik Digital Pada Percakapan Grup Whatsapp Menggunakan NIST SP 800-86 dan Support Vector Machine,” Cyber Security dan Forensik Digital, vol. 3, no. 2, pp. 34–38, Dec. 2020, doi: 10.14421/csecurity.2020.3.2.2193.
• N. Citra Dewi, T. Sutabri, and F. Putrawansyah, “ANALISIS PENYADAPAN PADA TELEGRAM DENGAN NETWORK FORENSIC,” JIKO (Jurnal Informatika dan Komputer), vol. 7, no. 2, p. 183, Sep. 2023, doi: 10.26798/jiko.v7i2.789.
• Y. Sri Maharani, S. Trisdiatin, M. Rafli Ihsanuddin, and F. Rahma, “Kekuatan Enkripsi End-to-End: Kajian Literatur Mengenai Kerahasiaan Komunikasi Digital dalam Aplikasi Pesan Instan,” SEMIOTIKA: Seminar Nasional Teknologi Informasi dan Matematika, vol. 2, pp. 1–7, 2023.
• I. Safira, E. Lubis, and F. Fauziah, “Copy Right Protection For Netflix Streaming Video Circulated In Telegram,” Jurnal Hukum Jurisdictie, vol. 4, no. 1, pp. 80–88, Aug. 2022, doi: 10.34005/jhj.v4i1.84.
• S. K. Smmarwar, G. P. Gupta, and S. Kumar, “Android malware detection and identification frameworks by leveraging the machine and deep learning techniques: A comprehensive review,” Jun. 01, 2024, Elsevier B.V. doi: 10.1016/j.teler.2024.100130.
• Md Fahim Ahammed, “Clone detection to prevent software piracy in android play store,” GSC Advanced Research and Reviews, vol. 21, no. 3, pp. 108–131, Dec. 2024, doi: 10.30574/gscarr.2024.21.3.0487.
• M. I. Zulfa, S. Tena, and S. D. Rizkiono, “Aktivitas Sniffing pada Malware Pencuri Uang di Smartphone Android,” RENATA: Jurnal Pengabdian Masyarakat Kita Semua, vol. 1, no. 1, pp. 7–10, Apr. 2023, doi: 10.61124/1.renata.4.
• G. Setya Agung and T. Yuniati, “Analisis Malware Trojan Dalam File Undangan Pernikahan.Apk Pada Smartphone Android Dengan Metode Hybrid Analysis,” eProceedings of Engineering, vol. 12, no. 2, p. 3312, 2025.
• R. A. Ramadhan, Abdul Kudus Zaini, and Jerika Mardafora, “Pelatihan Investigasi Digital Forensik,” Jurnal Pengabdian Masyarakat dan Penerapan Ilmu Pengetahuan, vol. 3, no. 2, pp. 1–6, Nov. 2022, doi: 10.25299/jpmpip.2022.11003.
• R. N. Dasmen and F. Kurniawan, “Digital Forensik Deleted Cyber Crime Evidence pada Pesan Instan Media SosialDigital Forensik Deleted Cyber Crime Evidence pada Pesan Instan Media Sosial,” Techno.Com, vol. 20, no. 4, pp. 527–539, Nov. 2021, doi: 10.33633/tc.v20i4.5170.
• Program Studi Informatika, “Tahapan Digital Forensik secara umum,” Universitas Ahmad Dahlan. Accessed: Jun. 30, 2025. [Online]. Available: https://tif.uad.ac.id/tahapan-digital-forensik-secara-umum/
• A. I. Yuladi and R. Indrayani, “Analisis dan Perbandingan Tools Forensik menggunakan Metode NIST dalam Penanganan Kasus Kejahatan Siber,” Jurnal Teknologi Terpadu, vol. 9, no. 2, pp. 95–100, Dec. 2023, doi: 10.54914/jtt.v9i2.636.
• R. P. Prambudi, Imam Riadi, and Murinto, “Analisis Forensik Mobile pada Aplikasi E-Commerce Menggunakan Metode Association of Chief Police Officers,” Cyber Security dan Forensik Digital, vol. 8, no. 1, pp. 44–52, Jun. 2025, doi: 10.14421/csecurity.2025.8.1.5234.
• I. W. Putra, A. Suharso, and C. Rozikin, “Akuisisi Bukti Digital Dan Deteksi Keaslian Citra Pada Whatsapp Menggunakan Metode NIST Dan ELA,” Jurnal Sains Komputer & Informatika (J-SAKTI), vol. 5, pp. 712–726, 2021, Accessed: Jun. 29, 2025. [Online]. Available: https://tunasbangsa.ac.id/ejurnal/index.php/jsakti/article/view/370
• C. Mustafa, “Integritas Chain Of Custody Pada Pemeriksaan Bukti Digital,” Judex Laguens, vol. 2, no. 1, pp. 75–96, Mar. 2024, doi: 10.25216/ikahi.2.1.4.2024.75-96.
• Aidil Wijaya Kusuma, Erick Irawadi Alwi, and Ramdaniah Ramdaniah, “Analisis Bukti Digital Pada Media Penyimpanan Flash Disk Menggunakan Metode National Institute Of Standards And Technology (NIST),” Cyber Security dan Forensik Digital, vol. 7, no. 1, pp. 18–24, Nov. 2024, doi: 10.14421/csecurity.2024.7.1.4345.
• M. Ali Diko Putra, A. Wirawan Muhammad, B. Parga Zen, R. Yunita Kisworini, and T. Rohayati, “Analisis Forensik Pada Instagram dan Tik Tok Dalam Mendapatkan Bukti Digital Dengan Menggunakan Metode NIST 800-86,” Jurnal Sistem Informasi Galuh, vol. 2, no. 1, pp. 44–54, Jan. 2024, doi: 10.25157/jsig.v2i1.3695.
• D. Mualfah and R. A. Ramadhan, “Analisis Digital Forensik Rekaman Kamera CCTV Menggunakan Metode NIST (National Institute of Standards Technology),” IT Journal Research and Development, vol. 5, no. 2, pp. 171–182, Nov. 2020, doi: 10.25299/itjrd.2021.vol5(2).5731.
• H. Supardin, R. Satra, Muh. A. Asis, and M. F. Teng, “Comparison Analysis of Digital Forensic Tools on Instagram Messenger using The National Institute of Standards and Technology (NIST) Method,” Bulletin of Social Informatics Theory and Application, vol. 6, no. 1, pp. 65–75, Mar. 2022, doi: 10.31763/businta.v6i1.534.
• K. Khairunnisak, H. Ashari, and A. P. Kuncoro, “Analisis Forensik Untuk Mendeteksi Keaslian Citra Digital Menggunakan Metode NIST,” Jurnal RESISTOR (Rekayasa Sistem Komputer), vol. 3, no. 2, pp. 72–81, Nov. 2020, doi: 10.31598/jurnalresistor.v3i2.634.
• Elsya indah Fitria, “Penerapan Digital Forensics Research Workshop Dalam Akuisisi Evidence Forensik Snack Video,” Jurnal Komputer Teknologi Informasi dan Sistem Informasi (JUKTISI), vol. 2, no. 2, pp. 390–399, Sep. 2023, doi: 10.62712/juktisi.v2i2.108.
• N. Hamid, J. Kuswanto, D. Nurani, A. Dwi Putra, F. Mahananing Puri, and S. Tri Atmaja Ramadhani, “Forensic Recovery Techniques on Android Devices with the National Institute of Standards and Technology (NIST) Approach,” JTECS : Jurnal Sistem Telekomunikasi Elektronika Sistem Kontrol Power Sistem dan Komputer, vol. 4, no. 1, p. 53, Jan. 2024, doi: 10.32503/jtecs.v4i1.4676.
• I. Riadi, H. Herman, and N. H. Siregar, “Mobile Forensic of Vaccine Hoaxes on Signal Messenger using DFRWS Framework,” MATRIK : Jurnal Manajemen, Teknik Informatika dan Rekayasa Komputer, vol. 21, no. 3, pp. 489–502, Jul. 2022, doi: 10.30812/matrik.v21i3.1620.
• S. R. Ardiningtias, S. Sunardi, and H. Herman, “Forensik Digital Kasus Penyebaran Pornografi pada Aplikasi Facebook Messenger Berbasis Android Menggunakan Kerangka Kerja National Institute of Justice,” Jurnal Edukasi dan Penelitian Informatika (JEPIN), vol. 7, no. 3, p. 322, Dec. 2021, doi: 10.26418/jp.v7i3.48805.