hxxps://hzlhf[.]buzz/FUrvDuDOft/co-es?0504219331691473670&s=wa&

Resubmissions

04/05/2026, 22:13

260504-143f2ahs8p6

04/05/2026, 22:12

260504-14nb4shs8k3

Analysis

user interaction
yes
max time kernel
225s
max time network
217s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
04/05/2026, 22:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://hzlhf.buzz/FUrvDuDOft/co-es?0504219331691473670&s=wa&
Sample260504-143f2ahs8p

Score

6^/10

Malware Config

Signatures

Looks up external IP address via web service 3 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
34	ipinfo.io
35	ipinfo.io
36	ipinfo.io

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:3147

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 164KB
SHA256 1bafe5a4169576e505aefd391c93ffa50782e3c43883e9d4762c695e2857ff69
MD5 aacbd965331ad2720d617d608c351e27
SHA1 a30096f0ae354606a6af01c4755117442dadd959
SHA512 a93093e6af1c388d63888390f6045523eb185c7e3d9b1277aa651e154928185cb24de08dec6052d34a9bf0f064b485e7f24373320d9798c55e7c6f599dbab12b
SSDEEP 3072:mR8seb0d4MR/BWTSHbNY7GXFR8seb0d4MR/BWTSHbNY7GXN9:Q85b0OGVHbNY7c85b0OGVHbNY70
TLSH
T150F3D0687958A2792457E3D4E4323B35BC4BE39EC04919D297F8C2B45FE3DA4E3149E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.CnFnCJ.tmp

Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.CnFnCJ.tmp
Size 15KB
SHA256 84b60db91b1d2c1c16bc1ea21d8725220e8c356eaea7ac4f53737145a76db17a
MD5 c48241a4d7934d638b165ac082c972a2
SHA1 6eb16f56fe15d096e1dac8db6e0e74c435cee966
SHA512 02ce95609dd6f24f568b54b367244cbbd68f4a5376d2ac21628f137f1dbb35bd51829f70a195386870a8a1e070c123ce40ce31ece0bf0ab6dda34935085f801d
SSDEEP 384:/b2d/2TarHhfLV6k1aUTmngUBsKzfEwCL8y2eYFpOssZLGUOxtoq:/Y2E1wxgUSmfEw68ykFgZLPmtoq
TLSH
T1EE72D0F0AA4C8669C9A5883DFD1E4917DDE64D43FB44CF1ED619108E2AC6D8C42F628C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.MBa0e5.tmp

Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.MBa0e5.tmp
Size 16KB
SHA256 15d36bb1f957a9e4c6fc802ba242b47688db9d5331e09c4ad2749030d9819975
MD5 f00a1b18dcec5a8ad415f8197bc69690
SHA1 be850929a04ddfb94cd6591d6af87bbdb5541dc0
SHA512 cbd79f07d79a21c74e3b770b063f27e522bb8398e01d103fc8acf0037f04624b770bb93fe727cd0a1cacbb6e5d397aa4e40f799eb950e38a10b264f256db5ba0
SSDEEP 384:Ub2d/2TarHhfLV6k9iOTsjkixKYdpOwGIHFXaqNxqdRd2sQ/aMq:UY2E19iuZY2w3x3NcdusF
TLSH
T17772C0E0728D8671DDECE83828FAEA1A6CF6DF4218DDD1BBCD0C9145499CBD1296DB04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.WMrS8g.tmp

Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.WMrS8g.tmp
Size 16KB
SHA256 e3e07050d56622864564745552aafaf7511d72e6c711ccb4c560256319e9d664
MD5 c58b5164f12258d370e03e88ba79612e
SHA1 526c0d486bf30f87452c569254ada29ec70ae1cb
SHA512 19017e3bb9ef64bddba3b10ddbaa787bc16cbac01af54a5966357dad5bab44e48efbb962ac87417c3df663f0f3d4fcc5d169962a4f90239d56b9a9b72bb9fd52
SSDEEP 384:yb2d/2TarHhfLV6k9X5eDTdjAzADgjRmcBG8ieseb6fJe2ITCC0Yytme:yY2E19Xs5AzygjkcFsO6wSCktT
TLSH
T1FC72D09CD72E6296C6673B34BE76E1075C339F0AAC39C4B3961910A436E9A4177BD203
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.xAHKn1.tmp

Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.xAHKn1.tmp
Size 15KB
SHA256 9e197a61911da20bf6a3236b0caf3a95f798c4263669da9f55628a4a9df4faef
MD5 b3b813673bbbfc2b2bb7f501c3f2b9d2
SHA1 d7fa85020ddbb79bf753dff5789a90be7a7aa28c
SHA512 7d5cb97cc923ebee596551829c812556260a48e13b1e2a358c3a63cddadb1327335f00c091b6cb6b585c84ace2a6597575d0fb42e24153a7089c3012c7362371
SSDEEP 384:Xb2d/2TarHhfLV6kBdpusU6qXONmhoJOdI+u/g37Hfd6zN+YHg+rXg:XY2E1/fm+NMdI+1L/W+YHgT
TLSH
T13162C0D45A8FC20EA0CED27CF03C88175F96EA0054A6890AEA5C817496FD6C5D7FC724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads