hxxps://drive[.]google[.]com/file/d/1I5E79Z_cKDiAQ6Y6VQYVbknl6zCa2xY-/view

Analysis

max time kernel
329s
max time network
336s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
17-11-2024 09:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/1I5E79Z_cKDiAQ6Y6VQYVbknl6zCa2xY-/view

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
18	drive.google.com
19	drive.google.com
20	drive.google.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4308

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
29KB

MD5
f9782949a266ea1c5c5f4a062ee4ba91

SHA1
678218a3fe5cf478fb084254e4fd208725cf34e2

SHA256
b6cd6de7886287833fbdd1be23c2cbcc978af2fe7112b8a98512b97ea43658d6

SHA512
37a16471ea4327cbe748f7379ae5e90503697f508773784de2a2f3c39a4b304b6c415d0c7a82183aa73eaefd67bed522e5a7728a1a3b76fa1a6b91d30cb6988e

Download Submit
files/dom-1.html

Filesize
2KB

MD5
82163dac97f8d35dc2131484add539cd

SHA1
75d51c2682cf6f39ecc384d8f7649b0496e3ee60

SHA256
658dfe99ec6f35d6c4222aad135b77f223cb73f4a6bd64c6c3132a0c42ea6002

SHA512
774dd3f8fab3316c919ea4e0beb00270a0d1946650ca31a719c4251d6c7392e06ed9567a5e8a3112d084b413f15ed864616c2f55545bc2aea16df4fe9c97c97c

Download Submit
files/dom-2.html

Filesize
120KB

MD5
0df735325356f83ee8093bf1dc9cef16

SHA1
af6209c59d532ed4a37888fbff195c509eb8966b

SHA256
306606a4357a5b138ce1eabf0a3daf9a0ffd64f4e03ea3cf52dbe34fcd764b09

SHA512
acb94f3825b0a2a7cd51c42dae90a9cc1fecddf0437dc92e4eb9d655e99715537955698e16bf50c5af2136eb92499c58394db2d8be8ca45940381a6622ead89d

Download Submit
/storage/emulated/0/Download/.pending-1732440349-GoonAppV2.apk

Filesize
5.7MB

MD5
ba2c48e6fd645df56a829997e383800c

SHA1
415df3e7b2be2eb9289519fed048a5fd4104d7ba

SHA256
36d50fd9227945e5716b941188adfcf47e39edd60590cdaa7a411f5ac3add5ff

SHA512
b0d44adbf215148a82616c7a42cb566e68be1808bdccac437819b6d69eed6ae851f3a0bda41f1a430d2a3523c76d7049874296912f65ea5cd7959c96a3d0b107

Download Submit
/storage/emulated/0/Download/.pending-1732440349-GoonAppV2.apk (deleted)

Filesize
1.9MB

MD5
43cf133deaea08ceb6279e9554b58c0b

SHA1
7bd4dc1b3e35f0b1042545474cad343d4f457481

SHA256
dc8d6ec5484e099b2d2825cfeff0d54e50a1b8b4a4b6950705209ac3922fff3b

SHA512
bcf5c90a8b60d860c7d901998a0848f222fd454fbf09113f52e4f5dd4f178f623bbf9ae32138b8496c6e104f0dde642d1406a3703426346ca165a5264ca97fe3

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads