hxxps://drive[.]google[.]com/file/d/1rfnDZmm8c3ALiPfZKw-NmLKFAoNizQbK/view?usp=drive_link

Analysis

max time kernel
1079s
max time network
1085s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
07-07-2024 19:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/1rfnDZmm8c3ALiPfZKw-NmLKFAoNizQbK/view?usp=drive_link

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 7 IoCs

Web Service

T1102

flow	ioc
5	drive.google.com
6	drive.google.com
46	drive.google.com
47	drive.google.com
2	drive.google.com
3	drive.google.com
4	drive.google.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4215

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
2KB

MD5
d5ddbe81362fd4e900ec297ce02c7588

SHA1
2dad14d69ff4a324bce13f1edcb726f621076f8c

SHA256
5bc124e9c6891ec541686fc64944164dc7e085715d7486e580acd28961f15c49

SHA512
7d432eea6ed9dc5d23e6f53c1a47061b9b1657508e871f1f35cf90094c2aacc0bf0a0b3a4b923ad16b546562c5b5951fe01cd4fb98158bb3a25b78f05c2f9db1

Download Submit
/storage/emulated/0/Download/.com.google.Chrome.zv4X0b

Filesize
239KB

MD5
b0184b24260517b123f2db7ee53e44fd

SHA1
e2da1944256febdee2eba9a25ffbb287dbf8f8f3

SHA256
bce62c634a442e7872ae4234015198e6c1f400fc4b63ca988fd0e17610c8db1a

SHA512
e975bf49795c09d2eae5eb2c128454ea0d20541dd2996d6d71d9df2d97ffcb063c13ae256b73787ce5c084f69a34af0555911bbae0d017d1d1e191e3ec5936f2

Download Submit
/storage/emulated/0/Download/Unconfirmed 940164.crdownload

Filesize
140.4MB

MD5
72e16c609e80c56efa503f4f146cd39f

SHA1
59ac2702c64812445018fcfbd7ac2dbdcb2c211d

SHA256
f333fa60957eb0ec4c653ed41007ad5f1beb3d5448f89499e3836e9171779275

SHA512
5a771e3df252ae59ded7cc0e71b4c83e7c8af92544596c94aa94591c0a5e01a08b23b40f3a92983095b9315310f59c1fde7f040362e8fe93da6eb8323089aad4

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads