hxxps://drive[.]google[.]com/file/d/10is9FmijC0O5LgrlHa9InBzI41PzWG7J/view

Analysis

max time kernel
181s
max time network
156s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
09-10-2024 10:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/10is9FmijC0O5LgrlHa9InBzI41PzWG7J/view

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
16	drive.google.com
17	drive.google.com
22	drive.google.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4254

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
2KB

MD5
b2457cc8c29f4be25d3ac2add99b8364

SHA1
71c8f5d3d770e583e69c77ebbb937cde05bd5bc6

SHA256
c6f349a554fa4efdd1ddc61d3f334e23cf7b1413190a45c49a90aa1915d98074

SHA512
92a9c6e49b2578fbd9ecc1bd0d27cf80e39e5eed503a52484cb73d84ad3ea21571651b71222664ca5725a6b2ab2796a5b257bb572c3315774d89404b9ad1b56d

Download Submit
files/dom-1.html

Filesize
119KB

MD5
fe2e1277dffe6845d1edcc4063eb6a7d

SHA1
7198d7c3fc1ee1e565c0362e8c31752d5c064a44

SHA256
3b758b316eecd4c6732352b1d5a3d17cc61d12ba089c32f4182e3cf125ed1822

SHA512
517de0e35406e1fa14f36a4bc9bc4fd0c11869a0eb31f4b4dc9cd685ec972825c7f86be5c2ec374881b79393953f97a7035ea203a3ede1fefe68784f77416b1c

Download Submit
/storage/emulated/0/Download/.pending-1729075776-AMZR ORI 15SEP.apk

Filesize
24.9MB

MD5
073626e7723d17ced5db0820bfcd8c3f

SHA1
925b702f44a33451e19612dbd7876837d53271b4

SHA256
00cd072e3f360e4296ae8c8e62f54bd947580eafb6b40a0368f0355c6669ada3

SHA512
d99166554ec455d9092c050764a844317475cc78fe2d9a35cd34817c92ddbbb99923be4454904692603bf02020f13f4e69ca685bb454ace93c4277863e8cb6a1

Download Submit
/storage/emulated/0/Download/.pending-1729075776-AMZR ORI 15SEP.apk

Filesize
154.1MB

MD5
6f11e6dd8c6755aa4fc955ebf343ef75

SHA1
bcac59a11f5e2ad17288d90b43f57ac3d57122e6

SHA256
0998c9be0eb6c0a57a338456a9d061129d032898df03b880b34a64412ca2ac6b

SHA512
5e885a84d86a2cdb492eb5b5363c4d50d577973c3a32079841d2a1ba66b5b47347663594826b504d15da112c8d25adae410f19ea67370d2314c30cd0f462a9b7

Download Submit
/storage/emulated/0/Download/.pending-1729075776-AMZR ORI 15SEP.apk (deleted)

Filesize
1.3MB

MD5
ab6f4f0bd83325b3db7df899726a1cda

SHA1
2ba6f52c7eade53308f9ea12f7e224e27f59ba91

SHA256
3612213a0ddb9db143e0112b0011dec8547843b9828fceb84f53e54c45526623

SHA512
9e4d16122773737b574a0766f964656c26aa34ba6927307e536d8c3faea9186cad10ee417ccfc68db48465d3ac67514a7843d8993f3dd7f6427057b14a9b09c4

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads