hxxps://drive[.]google[.]com/uc?export=download&id=1oFUa_YUv_FZZqQo7vQo79LDz9PhJzzT0

Analysis

user interaction
yes
max time kernel
113s
max time network
151s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
29/05/2026, 06:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://drive.google.com/uc?export=download&id=1oFUa_YUv_FZZqQo7vQo79LDz9PhJzzT0
Sample260529-hb5ftaev2v

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
10	drive.google.com
11	drive.google.com
12	drive.google.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4990

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 56B
SHA256 09bda72e7c32a69e3268e0ebd8caa33684cbc954dd00c7d93a38830e348ef324
MD5 cecb649cb1fb79c3736936fcbef3bbf2
SHA1 2c95183d7d2b0cd68d15b3c4115189351fc08720
SHA512 b8aca3cf0ea838093bd29b70ead608597260b0e35886d491d17c304878f99510fd885d96a191080acb5b706a642253bd9cbe5065ff234472b048fcce282061de
TLSH
T13C9002FDA4611009AC2037C01CC122561C1683E430824A0029C23474999432A9C0228C
MD5 SHA1 SHA512 TLSH

Submit Download

.com.google.Chrome.iCB5y3

Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.iCB5y3
Size 111KB
SHA256 ee9a3064b37a65f305cc2329123afb7a6e8640cf1108a65b4b96c615bd1184a9
MD5 1000b43877ea2a28f673c014c958e6b4
SHA1 f45fa18b9f54d0b4ee12a10475563602600a19ff
SHA512 59f04b0f67a261e9647e5c5f7e2f63debd7acdaf53baa46e296849c0686a9502cce8c8bc20a4bbb830c58e0b3215e5053e51aab47b9417daae7ed0057f375a78
SSDEEP 1536:hBWflwOgrEOUV3LGtE5spmBBZTqMKD0NNYE7VJ2gn6jlHuhA8vX/pNr4StJA5h2K:hBe+oNGSu4Z/KINNdvX6jdaAYPL9fKUG
TLSH
T1B6B31274E26EFE38CD27487DB610A4C153E3908D2990B90B5251FDFD398ED4987AE98C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FAST FS BUILDER TOOL -DEMO 22.04.26 C.xlsm.crdownload

Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/FAST FS BUILDER TOOL -DEMO 22.04.26 C.xlsm.crdownload
Size 1.6MB
SHA256 1e812d5b8b30744809e2478e6cdbeaad2af4d21537a599466a3a87261f91151d
MD5 54c3a7a2cf68b064b4c4527b7ac71dfb
SHA1 3f0cf2ad9be00f255e1d58754b053be12e6fe35a
SHA512 c23a231091d76cf9727691bf3e5fd5a6baf2db6dc6380321cf6be90eeb11f7e97546f4f2777d4c6e3e6d7484498f26840cdec1342bceeebb04ae4fc097bcb22c
SSDEEP 24576:njVHtESPoyrGRgM5nLTqiFR+5jZNpVQzwELbBZThfijIyYpoAfD0BEbu59EEdcA6:ngSPnbQNRSZHVyZZTFijHyoHoiGw7zY
TLSH
T194850129822D1D1DE52AC7BCE63C5BD4602E77AF4045E81D3098F51E8ED035BEB9839E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads