Analysis

  • user interaction
    yes
  • max time kernel
    858s
  • max time network
    902s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    18/07/2026, 04:26

General

  • Target
    https://drive.google.com/drive/folders/1KIzTqYo8xxBG-HSRKqC3z2bSOBrGlaLy
  • Sample260718-e2z28sbv7w
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 10 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • Checks CPU information 2 TTPs 2 IoCs
  • Checks memory information 2 TTPs 2 IoCs

Processes

  • com.android.chrome
    1⤵
    • Checks CPU information
    • Checks memory information
    PID:3215
  • com.android.chrome
    1⤵
    • Checks CPU information
    • Checks memory information
    PID:4147

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        files/dom-0.html

        • Size 235KB
        • SHA256 5d3c0e96f54a7a9492d8b064a386c58a1db1a54abb7f83ba38e3b53de394df94
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.LqWsFz.tmp

        • Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.LqWsFz.tmp
        • Size 17KB
        • SHA256 2ac44e85672e106d2b302200462ad65dfe7ac32d04c845f3ada0b598cdde84b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.Uc3xfm.tmp

        • Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.Uc3xfm.tmp
        • Size 17KB
        • SHA256 dedf37fa71fb5a9eccd544ff11abaf5a90a5a090a38535d7d75d607507c862bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.eHe957.tmp

        • Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.eHe957.tmp
        • Size 17KB
        • SHA256 e081d9fbbcecfe29f35959774610cbee33bf322fa9ebd2b297c28ac2bc0a0b30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .com.google.Chrome.ING3Al

        • Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.ING3Al
        • Size 124KB
        • SHA256 4548ef7616335bda48a6c6702fc13da703a47b0fbb74a30e39686502905ac6ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .pending-1784953726-EXPLORERS OF FATE 1.6.pdf

        • Path /storage/emulated/0/Download/.pending-1784953726-EXPLORERS OF FATE 1.6.pdf
        • Size 5.1MB
        • SHA256 6212e2f6f5f3d87b9abaa0330b33651b0944e2c5135ec1168ef3eed56468e8eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .pending-1784953726-EXPLORERS OF FATE 1.6.pdf

        • Path /storage/emulated/0/Download/.pending-1784953726-EXPLORERS OF FATE 1.6.pdf
        • Size 348KB
        • SHA256 1522b4881835e87e917b3d3e217bdb272a007271d0b73b45d289daf0c7e17c2b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .pending-1784953726-EXPLORERS OF FATE 1.6.pdf

        • Path /storage/emulated/0/Download/.pending-1784953726-EXPLORERS OF FATE 1.6.pdf
        • Size 365KB
        • SHA256 6b1b77adc289be21d297d19ce6c405406ed4010dc8d78ab778f19a965b643aae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .pending-1784953726-EXPLORERS OF FATE 1.6.pdf (deleted)

        • Path /storage/emulated/0/Download/.pending-1784953726-EXPLORERS OF FATE 1.6.pdf (deleted)
        • Size 636KB
        • SHA256 c24e0806f5d8eb38a7a8fc939aafc74bbe6c3176389aa80dd98002fa615a06e8
        • MD5 SHA1 SHA512 SSDEEP TLSH