hxxps://alightmotionapps[.]com

Resubmissions

23/06/2026, 16:46

260623-t929wsev8v1

23/06/2026, 16:41

260623-t7dhraev5v6

Analysis

geolocation tags

asiadelhiinindia
user interaction
yes
max time kernel
63s
max time network
198s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
23/06/2026, 16:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://alightmotionapps.com
Sample260623-t7dhraev5v

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 17 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
251	pastebin.com
300	pastebin.com
308	pastebin.com
318	pastebin.com
242	pastebin.com
293	pastebin.com
356	pastebin.com
369	pastebin.com
246	pastebin.com
285	pastebin.com
315	pastebin.com
352	pastebin.com
377	pastebin.com
266	pastebin.com
283	pastebin.com
361	pastebin.com
385	pastebin.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:3142

com.android.chrome
1⤵
- Checks memory information
PID:3535

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 274KB
SHA256 f1124e7bf395648e40c6bfbe776b9bf01433639cefebcb2cb0bbeb3bc18ee146
MD5 2b99a99983d8306cbe071fb8a90138e8
SHA1 2a266b9976b8133cfb8069e6adfa2e681292c334
SHA512 8e842930e3d01e37feb2a5e4f7a9bed13069ce63c74e603e8bd969762dea0264b89bdc5af3852844c398464102c454c88cebd7d553692706520a572d20a31d6f
SSDEEP 6144:Hq8Bp7dePSWHiI6QPDZIT6tyIxx5oOS2/LqcRNBm/TNCdsr6X3+BlBiXSrb:KUp7dePSWHiI6QPDZS6YIxx5oOS2/Lqv
TLSH
T1D4542A6BB7146879087F0F55D259F628B50A684AD60E63CAB0FAC1E025D91F30D73BCB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.4fawzB.tmp

Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.4fawzB.tmp
Size 16KB
SHA256 8bfebf4d647005bff73fe6d7995b1daadc821f6b193d9c61f1ba1d0b54ac5456
MD5 fb7e1ea44fe22ce7cd0c7e6d07587823
SHA1 f92b121a20b5b2a7dd62770c8a825a73826623ce
SHA512 5dd7e7099ae80ec7de4161f0cd24abb79164850a362f0e693d4f012f41839aec4bd5f81a902d68554a27fd57eacf1054195752f470844867c0a69ed71a297680
SSDEEP 384:WbO0BfRTiKm81V/ekfC5YDWpr+XfED9IVxoZ+/35EU+B39t3:WRRRZekF2r+jxk+/5ExV/3
TLSH
T12E72E14C5E8ED41671A73EB3294CC5C2925973062CD5B895072E13F070C24E5A5DDAE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.com.google.Chrome.KMAIyf

Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.KMAIyf
Size 9KB
SHA256 7a3d1e55de155562818c1786c1730ecfcefb3566d3283120478e41a1f85640a9
MD5 f248948b291005d5add4d6138e7af85b
SHA1 384c67c986a235811d46f96cb29f1347650ad5c5
SHA512 cdb082c6b5ff9b1f50e75f55ecb26c901e7ed213ccb4ee8999a1b12a3f75328e8468ce947551ba7911d7245db022e61a7d47b1d7c4daa249a8bcf308c846d520
SSDEEP 192:ZYcf1xtpyzaTz6GfR0mFiQbVkWoLrhibsloCn8nPDTU2:LptP6aF4WWrhFIP82
TLSH
T185127EB7E33A0167E93FC5726B314E81793715609A63DF68B73834956CAE209A042F92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1782837741-Alight_Motion_latest_alightmotionapps.com.apk

Path /storage/emulated/0/Download/.pending-1782837741-Alight_Motion_latest_alightmotionapps.com.apk
Size 13.2MB
SHA256 3252f0adad0248fc4050cf8afb54faf82dd76a6966ab71d0577c77f70bc9d7b1
MD5 38ef3cef17639d5d958971604c645b2a
SHA1 8043ce6afcf35363ee2e6f2885ae407f6fef5119
SHA512 b705f36274c73c62fa4b02fa418f762e7b3edebf7217420b604937170be64d958090ef44a29468727b051e1e8d5a14220360de3d882fa0db6fef00c57c24c6e9
SSDEEP 393216:+fFNXzPTdGGuThuOYe3kXohjrTZzmgA2nvyUptTSUs0:SZPTAGxOYeNzO2n6UDz
TLSH
T166D6335BCF605829FF24D53E1487C252E6D98218D1AAC79B3A5D612B2BBF1409F0F378
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1782837741-Alight_Motion_latest_alightmotionapps.com.apk

Path /storage/emulated/0/Download/.pending-1782837741-Alight_Motion_latest_alightmotionapps.com.apk
Size 101.1MB
SHA256 950b218780e085857dc625b9ca116ff4f42d8b4aff966585402b2cf28a5ae3e0
MD5 06e5c39d6b5948f72d7a8f9a9ee929db
SHA1 612a169a83a186596208ee234c1cb2a737fe8315
SHA512 7cf64dc2fefd3ddf9743cb13a9ec9133cf1f6f23f7cfe3b331e97c32e45f092fac22313d2dd18ffd14a8dcfc687b6972f628099a17d618a6dc74a4d870fd2d61
SSDEEP 1572864:DIceZCiszRMo+ozfdGobRuXita8o9dl+ctRThVjbB6+FGtkfr:DyysoBiXitsrTtBvG2fr
TLSH
T1EC38234AAF18B81EF576D13E8955F532E29D4C35E752E7D36418320922F3AD08A0EBF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1782837741-Alight_Motion_latest_alightmotionapps.com.apk (deleted)

Path /storage/emulated/0/Download/.pending-1782837741-Alight_Motion_latest_alightmotionapps.com.apk (deleted)
Size 521KB
SHA256 a732062cab6a71d5565251609853aa0757506360ccf758a25dde940d90417f8d
MD5 a10dc99083e3089f58445c20742ef8a7
SHA1 1f485fd657f14d044bf7471e337ea1a57f1c8e06
SHA512 48c20958c23b189740c8ca8626148cbd79ec50e5c3d1852ccf4277eefb191feac4cf64f451a1c714799dfae993d69e81dc904a29b3bf39deef5605001614bae8
SSDEEP 192:ZYcf1xtpyzaTz6GfR0mFiQbVkWoLrhibsloCn8nPDTU:LptP6aF4WWrhFIP8
TLSH
T154B47EB7E33A0167E93FC5726B314E81793715609A63DF68B73834956CAE209A042F92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads