hxxps://drive[.]google[.]com/file/d/1lcS3silVTAliDy5z1KBAZU2rb7vUg-AF/view?usp=sharing

Resubmissions

05/09/2024, 15:52

240905-tbbpaavcpc 6

05/09/2024, 15:49

240905-s9jbcatfkl 6

13/07/2024, 12:36

240713-ps1mhstaje 6

Analysis

max time kernel
1804s
max time network
1823s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
13/07/2024, 12:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/1lcS3silVTAliDy5z1KBAZU2rb7vUg-AF/view?usp=sharing

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
23	drive.google.com
27	drive.google.com
29	drive.google.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4401

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
56B

MD5
cecb649cb1fb79c3736936fcbef3bbf2

SHA1
2c95183d7d2b0cd68d15b3c4115189351fc08720

SHA256
09bda72e7c32a69e3268e0ebd8caa33684cbc954dd00c7d93a38830e348ef324

SHA512
b8aca3cf0ea838093bd29b70ead608597260b0e35886d491d17c304878f99510fd885d96a191080acb5b706a642253bd9cbe5065ff234472b048fcce282061de

Download Submit
files/dom-1.html

Filesize
115KB

MD5
1bb051b50ffda9dcd81b3b772692d83a

SHA1
d705275c67269a333ee66f2760ff1adfe57afd1c

SHA256
7e15bd4ada425e7ae9c45a66f56ca6a31754476d1001d63b1504d763a4872198

SHA512
7d96a3f3b23b3f5868f0d54c0da921a823f12c0c145837793a24b8365ee6655b73608dc8244d03f74e627dc66aa7e2d8fb5f766775745cd5e5e4ab556191a12c

Download Submit
/storage/emulated/0/Download/.pending-1721479091-screen.exe.py (deleted)

Filesize
513KB

MD5
043527b51c43788fdc174a2889b2a0c8

SHA1
769566730ca5ab814e1793383a413929a3a4de9c

SHA256
7faf507089895beff41fb882c5847d8a6eeb9eaae1ef85489a6a11a5fea09cd9

SHA512
16813bf5572091403d4ff0fbbd8fe57e032f3290baaa8604f7d45b3e1572e3b9a5d972e96546c43002c4530c8cbf5b2f8928527f4f28fe25c36ee8d43bf905cd

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads