hxxps://drive[.]google[.]com/file/d/1rdP_Ff-NFRtELN554qVgssYc5QSDAa64/view | Triage

Sharing

General

Target

https://drive.google.com/file/d/1rdP_Ff-NFRtELN554qVgssYc5QSDAa64/view
Sample

240418-wq4pqaba47

Score

7^/10

android collection discovery evasion pyinstaller

Malware Config

Targets

- Target
  
  https://drive.google.com/file/d/1rdP_Ff-NFRtELN554qVgssYc5QSDAa64/view
Score

7^/10

pyinstaller collection discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Executes dropped EXE
- Loads dropped DLL
- Reads the content of photos stored on the user's device.
  collection
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

urlscan1

behavioral1

behavioral2

collectiondiscoveryevasion