hxxps://drive[.]google[.]com/uc?export=download&id=1yphkLdzIvuKalwMwZSyCj-Nx0OtPYUgd

Analysis

max time kernel
122s
max time network
152s
platform
android-13_x64
resource
android-33-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260325-enlocale:en-usos:android-13-x64system
submitted
06/07/2026, 14:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://drive.google.com/uc?export=download&id=1yphkLdzIvuKalwMwZSyCj-Nx0OtPYUgd
Sample260706-rtknssb15j

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
17	drive.google.com
18	drive.google.com
22	drive.google.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 2KB
SHA256 a6a1fc5396e78861b714fe9f1cacbf4801ec0cfbe22bd3c7965a227477351303
MD5 0bc6073f8b33394af43f7be3d9dc4a17
SHA1 13170998c8e77029b77383315c3dba2bbff65111
SHA512 09d445b1904b75970c6329acf6b2fc5139bfddcf7d250ac20c89a53f159c97731178dd508308f3030eb814d64f4fc5ed539c76fbfb15b2d82a4ff4928349c8bc
TLSH
T11041C561F202482D1A27C6E0ABD9B257B431C386C5D71EE07438D328BFE9805B3D326A
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads