hxxps://www[.]ostora[.]tv/downloads[.]php?lang=ar

Resubmissions

04/07/2026, 17:16

260704-vs7cysav7x4

04/07/2026, 17:13

260704-vrddgsav3x6

04/07/2026, 17:04

260704-vledlaat216

04/07/2026, 17:01

260704-vjp3bad15m1

Analysis

user interaction
yes
max time kernel
189s
max time network
457s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
04/07/2026, 17:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.ostora.tv/downloads.php?lang=ar
Sample260704-vledlaat21

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:3217

com.android.chrome
1⤵
- Checks memory information
PID:4085

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

primary.prof.QzkkCT.tmp

Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.QzkkCT.tmp
Size 16KB
SHA256 2e6bd4de349560b393f5025e4ceb7bc94b466395e3057c4e139b88b2af3e3f75
MD5 b6ee33a5d0b60c450349e68c96d2247f
SHA1 67f4bc49f100216c5f539f89a9cad17f3118da4e
SHA512 b9f0aad0d466f1e1738f95bd517970802dcf7f04f553e41d2d239ec55367ab3fd4f9e904c0f942d0e634f6ea17d97267386c49528bf7e83858edc5531040609c
SSDEEP 384:SbAMK0stW3frIgKpVULiejuWYDpCuGoV0YTjsEIu0:S8WPryzMiqJaUuGitTH0
TLSH
T19F72BFE837917331CA4E5E366B71DA3D0C93B61F90644377B2488667A89BB10925FF18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.com.google.Chrome.YOpEiv

Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.YOpEiv
Size 88KB
SHA256 b74ac8dd37031d808af8e9c56044deacc19a36053bcfd6cd5bae3db950ad7a13
MD5 fcb41c3c07fcd5383fed6e7214e48a13
SHA1 19f8c025b21f5e29231f049abd04a4537bd4ca24
SHA512 26d4ae5bdbf200eeee49426879b470e7ccba1570e6143e758d56f073b8e9cb91d53c415cc6909445b382e15fc130ee511c884bc0a2d2b5db359e4d82d7f391cb
SSDEEP 1536:40FpZhHuFGzjcXzqHZ6nL+O16gLs8kONe8T5S0DwbMInFwafOd3Hu:BFpZ94M4X1nLt16gohObTQ0LIFffORO
TLSH
T13293029768FEC78AFDDE565099CEB05DC299DBC21CAC442C15ED209638EB4302CF4A93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1783789527-v7.0.0.apk

Path /storage/emulated/0/Download/.pending-1783789527-v7.0.0.apk
Size 10.0MB
SHA256 c2d4648e111ba03637d9f2f2fad89697b29c7e8d84c29339105f161cca580562
MD5 622e4a4c008f91a75b797116dd52c015
SHA1 173c0410a1e56110848a1d2ce74b3050392727ec
SHA512 966d4cd7a3b4ba3aaf5f1e4fc0a84847238e62146a2a4a2b2b27a66e8b769780d4d21dd4d8f1f0c3816f0b4915ce6d5f4ba06b9977ba111dcd88ae5980a302c2
SSDEEP 196608:r300UJvpt8EBP2/4Bl1HIu2x1iPrvLVNGoMBGxpIUj2yLgDPE7EB/fyrts:rE0yn1Nz1HIVx1iPLLVrgGxpIUZLgzEm
TLSH
T19EB6128EFB18BB2FC87B407309D69631221A4D178E8297476954372CB8775F80F99BC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1783789527-v7.0.0.apk (deleted)

Path /storage/emulated/0/Download/.pending-1783789527-v7.0.0.apk (deleted)
Size 600KB
SHA256 05460d6de2d69f14e6c5ffc52629340af3aa5a20db659e0091a5788495a2d8b9
MD5 442dfd7ae91e2c9a9c5b0c741825e60c
SHA1 5de61a4c1c087e599aae067a2204248695a011af
SHA512 795fe8dc6a216e381ca7e1be573812b1a066cb5ac0433e37de4bd834c9aec3323960e4f7f2b8d11d2be922233805b61b5a5fe45df25393675a371f6846aaf131
SSDEEP 1536:40FpZhHuFGzjcXzqHZ6nL+O16gLs8kONe8T5S0DwbMInFwafOd3H:BFpZ94M4X1nLt16gohObTQ0LIFffOR
TLSH
T132D4029768FEC689FDDE567099CEB05DC299DBC218AC442C15ED205638EB4302CF4A93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads