hxxps://github[.]com/TrisodiumPhospate/Safe-Malwares

Analysis

user interaction
yes
max time kernel
421s
max time network
1798s
platform
android-9_x86
resource
android-x86-arm-20260325-es
resource tags

arch:armarch:x86image:android-x86-arm-20260325-eslocale:es-esos:android-9-x86system
submitted
06/07/2026, 05:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/TrisodiumPhospate/Safe-Malwares
Sample260706-glcccaav5z

Score

5^/10

Malware Config

Signatures

Probable phishing domain 1 TTPs 1 IoCs

Phishing

T1566

description	flow	ioc	stream
HTTP URL	53	https://agentpedia.tmafe.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a16c5b9c083a9953	3

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4229

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

T1566

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 496KB
SHA256 48322f84fc8bbe6a770156b32e6fb0d76d573255d1a3c0e17c2fb47241b701fa
MD5 a2f8f1542e1220bb9aa1352d22f0556a
SHA1 87cee98f4e4508a2070d07c47e6bc861e1afa9aa
SHA512 68c1ce575a982f282a947feb9d788ea32a486da6a69b8355d4942dadfc433fc1afff3ec8d80a19b10731cccc897386e6e40c7152932202c8ddb35c8eab10a15b
SSDEEP 12288:/Q3YphfpZwz/JZI7xqdn5pjUsvVm7MVqWX8ijE9WbqieJ5PTQYyHxHA7op9hrIQD:/Qh
TLSH
T1F2B4A860B06831BD421B2A9AB130A71CA34BF39DD65D50A16A7FE7E487F3CE4ED93054
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.com.google.Chrome.foj8Pi

Path /storage/emulated/0/Download/.com.google.Chrome.foj8Pi
Size 418KB
SHA256 f8705e187d5ae79de3d92b00bc568223d249df4f2bcd0cb2f729c6b08ac34a2a
MD5 11af03a8e62945b303c68d216b7d1255
SHA1 4a883127b1a160c001f2f6ae642bb6e5228d35c9
SHA512 81362469a2180c97ce210497de90144bdb1c8e0053a6310dbcc4c73d8b724590ba172fd82e920b73e51f8fe3825962c94789c38f16c3e7e84a8a69e826a4cc7c
SSDEEP 12288:Lo5JBusQE7fuXjW77613VprnMBaEvRQwHA2gbVhvykhj:LgJBLQCf0ja7S3VprMBWs4hZhj
TLSH
T17A9423AD915034C6DCC1BC8FF0C8749EB846BE6ACF72F47F938068740A526E17059AA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Bonzi 2.zip.crdownload

Path /storage/emulated/0/Download/Bonzi 2.zip.crdownload
Size 49.8MB
SHA256 61894693c6088449eaee551916b5f181602588bc51aaa933e0f6c8dd66efe8ce
MD5 a329485902a47dcfb6f2f98c113cfbd0
SHA1 abc70b935fe592524dbe25f58e235007c32b20a2
SHA512 bccbc061e04d99cc2165d1fdc6f339ccaab9c4714d49b14782e5b9152d97ace349cf1d13b2b11e8a47f357290edaedada6c1190cc874041e1e5f6e98981ce2e8
SSDEEP 1572864:VrXJmVPHHpgbw+ojykM3VO+4hG1peXyKRL2U:V1m5npwwRvgO3ipVAl
TLSH
T17CB733638A0E9269C5F8F33786D68416905553C91AB22CFEF3B26985C371FD70F39688
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads