hxxps://drive[.]google[.]com/file/d/14B4oJ9II5rDyYUSUa1-M1dZBuJsuRCcJ/view?pli=1

Analysis

max time kernel
98s
max time network
102s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
22-08-2024 15:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/14B4oJ9II5rDyYUSUa1-M1dZBuJsuRCcJ/view?pli=1

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
11	drive.google.com
14	drive.google.com
18	drive.google.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4293

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
2KB

MD5
4474f48a20178d0f141440b74a959edd

SHA1
1c0746eb50f3b781b504a80215d29092c37078d1

SHA256
17c200a2333017d6c1adbc4d31d569a0568849703e3ac28c67262732365cfb56

SHA512
06e80b09db777360a31a49dbcb981407f588c886f8171b1e0d918004dbfdd4fbeda1f387db027dbc0f6de05fa78cbb0a9019723e585b5a8cb74af8476ce61b17

Download Submit
files/dom-1.html

Filesize
115KB

MD5
287984221549583b733aa63a2597cefa

SHA1
2bf0f6923df809234cdfa83cf493aa3df54e1378

SHA256
c338b6d909909edae675eedf19bcc79cf41fae5546f8a795361db449ed8dd23d

SHA512
6a011c86433c60beb7ca83476ca61762bc38e7b9f5ddcd05b8c655fd68d72c02f825cfea4ba79f5253147d43e52fbdfb68562e6318ac2181ce12e9951f0a66d9

Download Submit
/storage/emulated/0/Download/.pending-1724943804-TeddyLauncherV2.apk

Filesize
13.2MB

MD5
bbe7d652160b066d301b18e91688dcb7

SHA1
c1a67b8ac172fe619e34f89f22923b2ad72f0874

SHA256
a32a708b6d12c192fea3cfc7c613aad158fd6480f130894f3c03ee1a0b1ef91c

SHA512
2d5a9eb31ec7bf6d6c429c0cd152ce51348b4702424ebfa6243b07cd52d97ee44b77f440d94897c32e98a53ea7483ae8951bba1cf689f26e17de22775db80222

Download Submit
/storage/emulated/0/Download/.pending-1724943804-TeddyLauncherV2.apk

Filesize
67.4MB

MD5
a241fd5d6df5d33ef8db495a113c9fa1

SHA1
01da2433cd17d439eb3aff4b5d5ea7636804c0f1

SHA256
7f3456f5a4eca9ea3c981016bb61f403177809cc8b5b2972175d12a3282fa201

SHA512
5ccfa7a13f4b01cf4d4993143fd6de991dd2d03f3d62b7a482d69d7803276b1ad6ca50e46bcade08f57c5ed61cfe919cc5ffc3ad25e65e57855878bbc8bba5ae

Download Submit
/storage/emulated/0/Download/.pending-1724943804-TeddyLauncherV2.apk (deleted)

Filesize
1.9MB

MD5
40d78279586284ae05a5aa0da90448a3

SHA1
584136a014f761877f27c1eca5d3f120cb7714c8

SHA256
40b4866dbc2fb1c7fa0f900a89e04e2ea12ad6964430875b657b867d0d8dd463

SHA512
0b688b4f3ade3fbaf863750877c8be3fda4193851183779ffa6361a85be66e3f26fe22930d27aeafa9de2b33367caae127bc581396765653b15866ecd1ef6a4c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads