Analysis

  • max time kernel
    197s
  • max time network
    1028s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    09-10-2024 10:53

General

  • Target

    https://drive.google.com/file/d/1jc75VkzLPrt9K7_Sp_JxOfn6b5fLuYmw/view

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 8 IoCs
  • Checks CPU information 2 TTPs 2 IoCs
  • Checks memory information 2 TTPs 2 IoCs

Processes

  • com.android.chrome
    1⤵
    • Checks CPU information
    • Checks memory information
    PID:4254
  • com.android.chrome
    1⤵
    • Checks CPU information
    • Checks memory information
    PID:5432

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/Download/.pending-1729076190-AMZ ORI 12NOV.apk

    Filesize

    38.6MB

    MD5

    635506001e4f7a509af1360ea0e5193b

    SHA1

    19178128c0c23ca6250e1c36feefc6aec60e9192

    SHA256

    d05ce332c3c8a6a6f411374d468983c60d5cffd404244752914dad656ab802e0

    SHA512

    de28f52134e34b9b04735f314cf3f2d81b61598243f15ad7293e9e19f6cde06042678349df0355704e6ff90b1fdfa26f867826ea4571c33523dd0f3ece1345af

  • /storage/emulated/0/Download/.pending-1729076190-AMZ ORI 12NOV.apk

    Filesize

    38.8MB

    MD5

    388941e3fa2ed9de45aa8914f82615b9

    SHA1

    b409487c3fcae8b9d55cdab5b5e473faf8ffa600

    SHA256

    2fd5aa8eccff864da0e16c0ac63d1a1f392aa0b20815cb27dce69fd474e08158

    SHA512

    171833ef6df6c2ab6c8320f7335c0da92959d8971bfc6ff1c1c6402ad057ea13b5a9d914031f500405d4ca0b5bd17cd8a37ff8d61832848086c5eddb2eb1abf7

  • /storage/emulated/0/Download/.pending-1729076190-AMZ ORI 12NOV.apk

    Filesize

    103.0MB

    MD5

    a794bde803117a31f726141b0d2ab904

    SHA1

    bb2a594eb9ce8bd99f5ddfbec4c03ee0ba1a2963

    SHA256

    e768579f37ed594486b66a8d31d151d0f266b4f484a897285eb947869d5792c1

    SHA512

    db2d8ce95382df85b8d59581064a08056e8d251a5ab30464752b03cae1bdc630e1551d19864e2c4982307b15d7b139bf307f26af7f5167f0cd09f22a4d45cbf0

  • /storage/emulated/0/Download/.pending-1729076190-AMZ ORI 12NOV.apk (deleted)

    Filesize

    2.1MB

    MD5

    03b378cb2a8bb5028b59b8b9950892d4

    SHA1

    1e90dd250223448f545603d13aa2fee07b59f970

    SHA256

    5e763c6c173aba098233320d3924639d834fc8d4016ffcbf43c00fb83e424127

    SHA512

    acdd454088110a828aab7e5154eae965ffc017bf70c8e36c1d7ea39ad0907f3e722a667ae1a8bb4aeeff31c2ceea979933484f0834b5356f22913262dcacc31a