hxxps://drive[.]google[.]com/file/d/1-7Krk1czfswVsdyQSgaruSp7rge1qm6h/view?usp=drivesdk

Analysis

max time kernel
127s
max time network
130s
platform
android-13_x64
resource
android-33-x64-arm64-20240910-en
resource tags

arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
submitted
18-01-2025 04:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/1-7Krk1czfswVsdyQSgaruSp7rge1qm6h/view?usp=drivesdk

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
9	drive.google.com
12	drive.google.com
13	drive.google.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4457

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
2KB

MD5
5e1534a9048ffad08850029a2fbceb0b

SHA1
fafa6449ec6d96e0eecc39eeee06637e9fced7d6

SHA256
a8ccbb8d34402d08300bbee85b451b5944597c4267a2a9a3fdfae82554239611

SHA512
b2adc8d1b8ad0cc0d6c88c4cf46b3030ba1367d9b460fa22b17420d4799ea48591413c33b8b21dbf287da5fd14a12b88bb2fcd95629ae46774e4ba99cf6536c3

Download Submit
files/dom-1.html

Filesize
118KB

MD5
c4ba684115b8ff14206f4cb95dd737b3

SHA1
f2d40a1a0ac58335865b6e6dc853e36f7a3988c7

SHA256
c726c37887456c352634153cbcd07de67b2c183b0ddeb91f8d2875ab55b4114d

SHA512
5001cadb60a9f64e519b53f3b5f336e6189416acd0f2428e69b2ebc4bb22f99f9854d3fe0be5f635a0f82bae00fdd5beb3c38a4cd342fda0a62d1dfe3866886a

Download Submit
/storage/emulated/0/Download/.pending-1737777799-base.apk

Filesize
7.6MB

MD5
7bb3f59e06920437332a0b4387cc386b

SHA1
c3b4b4b35096ea1143d6bcad9ae1aff7c8fa6c21

SHA256
b7ecebc9200cd7eecf4b9b8d70e9290ee597f36ebc756fd6a6d861e5d2de9f49

SHA512
b90b193055f9a91c29d0f5f031a1f592c27798b128911596ae27c0c8d961af6498c5787c91659b59509d5243682f81ec49b33ede66a218f1704e0528cfe817db

Download Submit
/storage/emulated/0/Download/.pending-1737777799-base.apk (deleted)

Filesize
607KB

MD5
2beebdcad96de890f4ce6da75e42ac0a

SHA1
24e7bc78b2c8b353c05fe3836e59a32982746c57

SHA256
a5f518da048bba109f638c87dea48efc292803b8d4712928e4b9f5d8fa44a10c

SHA512
52b6decc49942341bfd89cc50fe5dbe83aa36150264a100aa6bc48e805c0fb05c8161ce624fb3c1f3757494ddf4c5dfd4d9b1bcc1702bdbbeb9864bb3d27aa61

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads