Analysis
- user interaction
yes - max time kernel
858s - max time network
902s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
18/07/2026, 04:26
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://drive.google.com/drive/folders/1KIzTqYo8xxBG-HSRKqC3z2bSOBrGlaLy
Resource
android-35-x64-arm64-20260325-en
4 signatures
900 seconds
General
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 10 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 68 drive.google.com 125 drive.google.com 127 drive.google.com 128 drive.google.com 124 drive.google.com 126 drive.google.com 16 drive.google.com 17 drive.google.com 19 drive.google.com 21 drive.google.com - HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule behavioral1/files/fstream-10.dat pdf_with_link_action - Checks CPU information 2 TTPs 2 IoCs
description ioc Process File opened for read /proc/cpuinfo com.android.chrome File opened for read /proc/cpuinfo com.android.chrome - Checks memory information 2 TTPs 2 IoCs
description ioc Process File opened for read /proc/meminfo com.android.chrome File opened for read /proc/meminfo com.android.chrome
Processes
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Size 235KB
- SHA256 5d3c0e96f54a7a9492d8b064a386c58a1db1a54abb7f83ba38e3b53de394df94
- MD5 d868c29f38d534ac727de73c5cb572e2
- SHA1 a9f5843a4cab6f2ec6069392a722b67624c175b4
- SHA512 735434f26eab7fba412716d7163b184d7e4a28242d25178bae6267cb18813fcec6cbd6947ec1be38153e884bb648daf058e3a23da6576076f0add9ac0dbbdeb9
- SSDEEP 3072:G/J0xhmqb8B4swr/XdVG7XnTfLny+WfOLPLq:K4swr/XTG73TDny+8OzG
- TLSH T19434827269032DF7EE1704D9A020531E356F427FCB872871E7E96FB22BC6C92682558D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.LqWsFz.tmp
- Size 17KB
- SHA256 2ac44e85672e106d2b302200462ad65dfe7ac32d04c845f3ada0b598cdde84b5
- MD5 6153c66f4c59cdd42f040c6c221e6923
- SHA1 c53c79a6a9a8cefc8f0f8702067b9b07b236ac71
- SHA512 ff598e1ee908efb24d6036e56bc7647cdc187cef8c892ffaef10815fd22829fbee96600ee1edfc3934fa34efd61f3c91fdd3171bc103a7fc33d349b75655b93c
- SSDEEP 384:cbu3g7lKMkqoX+QSxAW4Ym3aI0kjuLMf6Wg3rAETTjDsbsy7MPFxbusTyRMrqMgL:c0g7lYP+yW4YYajaugf6TvTTfKdQPLuH
- TLSH T18282D14B1FD98C3370ED94248EEE8A616FB638713C9682D3C41E5C401F33086ABA5E62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.Uc3xfm.tmp
- Size 17KB
- SHA256 dedf37fa71fb5a9eccd544ff11abaf5a90a5a090a38535d7d75d607507c862bf
- MD5 60983f9c43123d56544da186ccb10f8f
- SHA1 6a327b9de942892c61c8e579950a04beea35a89f
- SHA512 d76dfae7072018890ed522fcc993a7444c1b15a22a22d25802da37130b1ce2c34ae328953680134abc22d956cf080069f2ad7a14e8dab2c903ee3c6212b0f2f9
- SSDEEP 384:Mbu3g7lKMkqoXhqLAtXP2LiLoh1NFy6R94Iu/szV9+7dij:M0g7lYPhEAtX+LiEhbFlRqRY9Sij
- TLSH T1F982F10C3C9DC9DEE46FC110E09D92486DADAE741C44B1CB0B8F58654FABD7A05E2E98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.eHe957.tmp
- Size 17KB
- SHA256 e081d9fbbcecfe29f35959774610cbee33bf322fa9ebd2b297c28ac2bc0a0b30
- MD5 0d640d7d6f2fff165ea0ab27ab837283
- SHA1 8866f04a5a341ea9bc52231811a72ff395d3e6d7
- SHA512 ce97a0b3b89fb53d2edc8890cfad58f0cf64c52f3e4e3510db20589c210df748b6e3c8cedd9d7aa8cfe4a0b691fc146e94f90ccee4daf0034448942617c0ccd5
- SSDEEP 384:ebu3g7lKMkqoXR1GpO6B1FTzdAojJs3MYFmEIBiwenMYM3eP6bRXvJ:e0g7lYPuP9AoWcYFmEId6M5pbRXvJ
- TLSH T1B082E1D71E5CC84154BF8A766858101C9EDF24B98C1BB76FCAC3E8831FA4B197BC445A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.ING3Al
- Size 124KB
- SHA256 4548ef7616335bda48a6c6702fc13da703a47b0fbb74a30e39686502905ac6ea
- MD5 c22a7d9ceb4058abcf27f010b4138e47
- SHA1 1570c29968ed3da4698553abfa3c3950575abefd
- SHA512 87870c0914f79b72cae86548fabf602651a15f364e6a9d48b872948a20f8819774c6c6f9758c1f531146b207232f7d919b079b96b9270f15b425b2aab374db6a
- SSDEEP 1536:qoFh+cGpNmmZKXLWJeNu1+SAV4kkuHslw00Q0DCkNjyOwW8c:hFJimmIXaJcy+SqMuMlw00Q0tMnU
- TLSH T1E5C32A034D098BC7F534D7E6BF071CEC6B1A3738A66132EA19628DEBBD140625DE606D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Download/.pending-1784953726-EXPLORERS OF FATE 1.6.pdf
- Size 5.1MB
- SHA256 6212e2f6f5f3d87b9abaa0330b33651b0944e2c5135ec1168ef3eed56468e8eb
- MD5 10a8b3e260d52a378485272eee14fa06
- SHA1 0aa149be6f10c1de14445b3cad252bb4c53885bf
- SHA512 2814eba4cec75d71aca3249cc5f5bcc053a712a40cb7ec1cc5b37e526eac8b55835e6833b0a5d95eca1577ab2c8997aecc78ca78a23979ac8c3d97a99457fa97
- SSDEEP 98304:9F3JcNHEYKl5pS6D094Dd7hR7qqE1mRdzO7bOsqHXdaB/B4/9niBrYdX39C:j5cNHEYWbS87hBB7zOPiXdaB/W/piQnE
- TLSH T17246AD23884C6EDBD35943F46B0F3D6D3A1D3629F5C527AA0329CB862A3463B594B11F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Download/.pending-1784953726-EXPLORERS OF FATE 1.6.pdf
- Size 348KB
- SHA256 1522b4881835e87e917b3d3e217bdb272a007271d0b73b45d289daf0c7e17c2b
- MD5 237992875e015ed84675e6597a0fed72
- SHA1 2122b46377b827caffbf5bbf2756e46909f9302a
- SHA512 128d1cf48083adca2df64dfa7e161b128edd48ed12f20b33dde029ff927d441150d2584bb3ec1fa1f19d00d1abab876c41cc70d123a40fad4533df510852a12a
- SSDEEP 6144:xdnF5YDH7lKPNtiBqjZCaJrbCjDC2GemNQT9p9a3h4/E:bFablKPEECUrK0emNa964/E
- TLSH T19174F003CC0C8A93E5658BF93D431EAC6F097B1CE9457AFE11365E9B3A792215C1E12E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Download/.pending-1784953726-EXPLORERS OF FATE 1.6.pdf
- Size 365KB
- SHA256 6b1b77adc289be21d297d19ce6c405406ed4010dc8d78ab778f19a965b643aae
- MD5 d2553edd1526d9045fc22a3b6858ffb3
- SHA1 73a21494fdcab65bd392976557d2f5f3b33f39fb
- SHA512 e36734e335a7ad07b49f28638d19bdcc37d36c08a190285aeda9a8a7967924ed14c458dca2497e4675fbe11a9e9925cca82cfa29e9bad8ee4645ccce293c3248
- SSDEEP 384:acCVQg00as2fYOYxhFmkg37uzY0gj+mZTjtl6xyf/:aCTVQR8rKe1bayf/
- TLSH T10184D2179D158A97E06987F9BE035EAD5F183A0DD8E22EEF10634F973920A721D0F42D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Download/.pending-1784953726-EXPLORERS OF FATE 1.6.pdf (deleted)
- Size 636KB
- SHA256 c24e0806f5d8eb38a7a8fc939aafc74bbe6c3176389aa80dd98002fa615a06e8
- MD5 8d7c6289d1d8e427c8735b97be340729
- SHA1 d2be06a210c288cea9b889cbb1c33f4cf5003c81
- SHA512 748bc2b5044d232e65e521bbaa75537e4b1134d59c415a52b87fb991e68cc073e511220043963e9624cf5ed45095173045e57a7317b8573004c4a5cd71f216af
- SSDEEP 1536:qoFh+cGpNmmZKXLWJeNu1+SAV4kkuHslw00Q0DCkNjyOwW8:hFJimmIXaJcy+SqMuMlw00Q0tMn
- TLSH T167D419034D098BC7F53497F6BF071CEC6B1A3738A66132EA19628DEBBD140625DE606D
- MD5 SHA1 SHA512 SSDEEP TLSH