hxxps://drive[.]google[.]com/file/d/1NfA-XwyFp_RcyThY0AgrGguS0LAqKF4Y/view

Analysis

max time kernel
264s
max time network
273s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
17-11-2024 09:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/1NfA-XwyFp_RcyThY0AgrGguS0LAqKF4Y/view

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
11	drive.google.com
14	drive.google.com
17	drive.google.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4302

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
1KB

MD5
525041f9ecd2b67443be49eace38c930

SHA1
cc97b668b0ef303f5891c9dc8981c358576f6202

SHA256
a9f99a897f0ce3669d1c1888841fb5df621df0eef05da51e39db3a26eeea6de9

SHA512
05cd5144216b491aa3971628799d49f8ab6a57a6b604f609f34480c8b13fa6c01cf04361d039e9c0be05b14a4db4db54346419a464c078ca368d116c54658c49

Download Submit
files/dom-1.html

Filesize
2KB

MD5
1151f7af603175ed5169e1b4ffd78d55

SHA1
ca094434b3c1a99601e2ba800b097ed1c3aafb13

SHA256
ba782dfd88df3b80e0956c5f40cc25b5652cc7ba9252375c8ad720f468b0b354

SHA512
cd5789d45fbb66335cdd16331a91d14558eddcd66d170a0d64403475be7b04bb43ed86bb92923ae4fe654e005ffbc79b90d4bdf982344d123a513aefc6d9c1de

Download Submit
files/dom-2.html

Filesize
120KB

MD5
2466ea58b4282a9f6c7df152add10bc4

SHA1
0652dbc1cbf42a6c5e4794dbd22a24abbf651131

SHA256
0923f7c949a17304737f45feddfe551ecb73e7257c8c78022559177e8688a43d

SHA512
eb23fa321c22832aebc5e6d0c93fdc287c8c77ad3b04bd51a5b579ae54dedc541f94689c106313cacf414392c3149744044207b7801b97df3265aed2f28e20de

Download Submit
/storage/emulated/0/Download/.pending-1732440139-GoonApp.apk

Filesize
5.7MB

MD5
27c06265e6a3af2eed3439cbe6127b83

SHA1
f98f86f57f16a9ea8e712e126a0ed16b3c352bb3

SHA256
5a6c09de56ad8c4784abccda51d866acfd1cdad262b4beb4124ea57c3e1ac5dc

SHA512
112154b9bc887869559b14a6ca92e82d5b8f362ff9528e54a56bcbc12045b13116a137edf939a0860201b45d8b0a64051b134a6cda3b745576490457b07ef717

Download Submit
/storage/emulated/0/Download/.pending-1732440139-GoonApp.apk (deleted)

Filesize
6.1MB

MD5
3c4becd0852304f6aa4bd47c63ff8ec0

SHA1
5f0c1f91abad23458a7036d17dd5ab3cc37a4730

SHA256
106859f3dc98c29d937a5acb1a358a617d9836a41de56230d9b3ce9733f60040

SHA512
4f4d9a8c363cc47aec6d116c1a1bd60c181e7870098fdcfd66130d0be815c1b36756ae14158a477071fce058011679e3764666a6265ff22169adc5208ed69882

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads