Overview
overview
6Static
static
1URLScan
urlscan
1https://msn.yidianzi...
android-9-x86
1https://msn.yidianzi...
android-10-x64
1https://msn.yidianzi...
android-11-x64
1https://msn.yidianzi...
ubuntu-22.04-amd64
6https://msn.yidianzi...
debian-9-armhf
https://msn.yidianzi...
debian-9-mips
https://msn.yidianzi...
debian-9-mipsel
Analysis
- max time kernel
128s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
15/07/2026, 06:32
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://msn.yidianzixun.com/zh-cn/video/webcontent/web-content/vi-AA26viv2?vid=vi-AA26viv2&locale=zh-CN®ion=CN&aver=526.15201.50.0&over=10.0.26200.8875.amd64fre.ge_release.240331-1435&fring=Retail&devicetype=3&oem=Dell+Inc.&smode=false&machineId=%257B4F522092-F883-4E67-B7E2-91022CD7B980%257D&clv=1.0&wprInstalled=true&usri=-1&wver=150.0.4078.65&renderWidget=true&useDeployedBundles=true&fullrefreshint=0&providerId=AA1JHler&ocid=winp2fptaskbarhover&cvid=aecbad37c3ed497ee442cc0d6813ca29&ei=9
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
https://msn.yidianzixun.com/zh-cn/video/webcontent/web-content/vi-AA26viv2?vid=vi-AA26viv2&locale=zh-CN®ion=CN&aver=526.15201.50.0&over=10.0.26200.8875.amd64fre.ge_release.240331-1435&fring=Retail&devicetype=3&oem=Dell+Inc.&smode=false&machineId=%257B4F522092-F883-4E67-B7E2-91022CD7B980%257D&clv=1.0&wprInstalled=true&usri=-1&wver=150.0.4078.65&renderWidget=true&useDeployedBundles=true&fullrefreshint=0&providerId=AA1JHler&ocid=winp2fptaskbarhover&cvid=aecbad37c3ed497ee442cc0d6813ca29&ei=9
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
https://msn.yidianzixun.com/zh-cn/video/webcontent/web-content/vi-AA26viv2?vid=vi-AA26viv2&locale=zh-CN®ion=CN&aver=526.15201.50.0&over=10.0.26200.8875.amd64fre.ge_release.240331-1435&fring=Retail&devicetype=3&oem=Dell+Inc.&smode=false&machineId=%257B4F522092-F883-4E67-B7E2-91022CD7B980%257D&clv=1.0&wprInstalled=true&usri=-1&wver=150.0.4078.65&renderWidget=true&useDeployedBundles=true&fullrefreshint=0&providerId=AA1JHler&ocid=winp2fptaskbarhover&cvid=aecbad37c3ed497ee442cc0d6813ca29&ei=9
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
https://msn.yidianzixun.com/zh-cn/video/webcontent/web-content/vi-AA26viv2?vid=vi-AA26viv2&locale=zh-CN®ion=CN&aver=526.15201.50.0&over=10.0.26200.8875.amd64fre.ge_release.240331-1435&fring=Retail&devicetype=3&oem=Dell+Inc.&smode=false&machineId=%257B4F522092-F883-4E67-B7E2-91022CD7B980%257D&clv=1.0&wprInstalled=true&usri=-1&wver=150.0.4078.65&renderWidget=true&useDeployedBundles=true&fullrefreshint=0&providerId=AA1JHler&ocid=winp2fptaskbarhover&cvid=aecbad37c3ed497ee442cc0d6813ca29&ei=9
Resource
ubuntu2204-amd64-20260127-en
Behavioral task
behavioral5
Sample
https://msn.yidianzixun.com/zh-cn/video/webcontent/web-content/vi-AA26viv2?vid=vi-AA26viv2&locale=zh-CN®ion=CN&aver=526.15201.50.0&over=10.0.26200.8875.amd64fre.ge_release.240331-1435&fring=Retail&devicetype=3&oem=Dell+Inc.&smode=false&machineId=%257B4F522092-F883-4E67-B7E2-91022CD7B980%257D&clv=1.0&wprInstalled=true&usri=-1&wver=150.0.4078.65&renderWidget=true&useDeployedBundles=true&fullrefreshint=0&providerId=AA1JHler&ocid=winp2fptaskbarhover&cvid=aecbad37c3ed497ee442cc0d6813ca29&ei=9
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral6
Sample
https://msn.yidianzixun.com/zh-cn/video/webcontent/web-content/vi-AA26viv2?vid=vi-AA26viv2&locale=zh-CN®ion=CN&aver=526.15201.50.0&over=10.0.26200.8875.amd64fre.ge_release.240331-1435&fring=Retail&devicetype=3&oem=Dell+Inc.&smode=false&machineId=%257B4F522092-F883-4E67-B7E2-91022CD7B980%257D&clv=1.0&wprInstalled=true&usri=-1&wver=150.0.4078.65&renderWidget=true&useDeployedBundles=true&fullrefreshint=0&providerId=AA1JHler&ocid=winp2fptaskbarhover&cvid=aecbad37c3ed497ee442cc0d6813ca29&ei=9
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral7
Sample
https://msn.yidianzixun.com/zh-cn/video/webcontent/web-content/vi-AA26viv2?vid=vi-AA26viv2&locale=zh-CN®ion=CN&aver=526.15201.50.0&over=10.0.26200.8875.amd64fre.ge_release.240331-1435&fring=Retail&devicetype=3&oem=Dell+Inc.&smode=false&machineId=%257B4F522092-F883-4E67-B7E2-91022CD7B980%257D&clv=1.0&wprInstalled=true&usri=-1&wver=150.0.4078.65&renderWidget=true&useDeployedBundles=true&fullrefreshint=0&providerId=AA1JHler&ocid=winp2fptaskbarhover&cvid=aecbad37c3ed497ee442cc0d6813ca29&ei=9
Resource
debian9-mipsel-20260513-en
General
- Target https://msn.yidianzixun.com/zh-cn/video/webcontent/web-content/vi-AA26viv2?vid=vi-AA26viv2&locale=zh-CN®ion=CN&aver=526.15201.50.0&over=10.0.26200.8875.amd64fre.ge_release.240331-1435&fring=Retail&devicetype=3&oem=Dell+Inc.&smode=false&machineId=%257B4F522092-F883-4E67-B7E2-91022CD7B980%257D&clv=1.0&wprInstalled=true&usri=-1&wver=150.0.4078.65&renderWidget=true&useDeployedBundles=true&fullrefreshint=0&providerId=AA1JHler&ocid=winp2fptaskbarhover&cvid=aecbad37c3ed497ee442cc0d6813ca29&ei=9
- Sample260715-hatmxsdx2p
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.android.chrome - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.android.chrome
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Size 5KB
- SHA256 ccb2045303e885f9e6339abedcfb17cd56c4b071ab73f831f0d964524335042c
- MD5 67478a97f709c4e8059a523e2eeef345
- SHA1 e60b069e2dd5954ea1f96849e8d8be66069b3c8b
- SHA512 a6e8f438790811eca08e2fedf1422c06fa255de379fbbb1a278d3ea481f45b3837add9e6760da3de3d2b46e57dd73809ee4aa9b7d76de80ed13592f56521a708
- SSDEEP 96:nGhXo2TZ2KF4FraFtF+0aKGeplRErfRPPxzSVVIkMVjSQDKL/8SCWa:nGhXLTZFeI7s0aKGeplMfpBSVVIkKjS6
- TLSH T173B184BD54F2008911633178EFD7A0803679514B398CDD843DDDAB209F4AD679AA37EC
- MD5 SHA1 SHA512 SSDEEP TLSH