hxxps://drive[.]google[.]com/file/d/1y1eQg4lFjiJDov-zGNpKGBFhmmOoj67b/view

Analysis

user interaction
yes
max time kernel
71s
max time network
77s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
20/07/2026, 14:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://drive.google.com/file/d/1y1eQg4lFjiJDov-zGNpKGBFhmmOoj67b/view
Sample260720-ryzzaadt4q

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
18	drive.google.com
19	drive.google.com
16	drive.google.com
17	drive.google.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:3167

com.android.chrome
1⤵
- Checks memory information
PID:3629

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 2KB
SHA256 a002ccd01cb5ba0645ed9bc95b5406931eb83a3ffcdb03c05e5753caf49bc005
MD5 29d6e89144cbaf8f21011c08c2fba647
SHA1 c21c5a679bec6240e6d753a26b07eec1f8082ca6
SHA512 4438e763743d2cd3dd2d2ddfb98ca69b195de4e81fcc9cf785c4a8bce8168b02e63361416152de0686866934ae2da641ffcb901925f4208a5c0634dd1aa9fd5c
TLSH
T1D351C721F116993E1927C7D897DAB3937072C286D5A71DE0717CC318EBE9805735326B
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof.pSydYD.tmp

Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.pSydYD.tmp
Size 16KB
SHA256 092b70d016a5ec93f2b4a91cf945c81f3b995c9c38653b24f30f3d17c90a62d2
MD5 2062651bc6030c23178ddcb32d712e41
SHA1 811e1b675a1ec39fada2a0cbce25cc0e2a76ca38
SHA512 2f758ce063385837c72855db8aaaf52ddc2c86c7bc05789b1b3401bbdfd4eca8a167b076a2ca22d833a694b4b65f12dafe274b00020e42e8ea2ab2125690ca14
SSDEEP 384:DbJqHZmJc3NFnI/oIyjQe4PS7gKL9t8QuwnGM+:D9TCde/oIy8eeS1D/Gn
TLSH
T17B72E12FC59C7A44C5FB617B3AA4981DA685466C03ED17911C6C8B0FC3578C6C3F9C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.com.google.Chrome.HQUMYB

Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.HQUMYB
Size 30KB
SHA256 3c14e4e97be0b981b9b1a50fb382e96d64501c82f9b171b4d5148ac0b73401c4
MD5 0fd98d41bce8a233f0bdc25bef464a71
SHA1 dc79bbe39d85a19cca0bea7c25af7368998bbfc4
SHA512 3c4f9d77a3f85058f783b5219460eb89688c286f60bc1d81d7e1d83911fca54af46e1994ccf8244fdd4598f77325f0a8fc2f4d83b1bbca23da6be89b599b48a1
SSDEEP 768:UsYT8MfR3kiqhqQEGpQyi81O22H6wtRzxIP7YlcB:/YJp3kiU3Sy4H6wDzxIDYlI
TLSH
T1DFE2F16942EF754450F8663DAC1FA04A0C2E5BA97F8CED840FED07D36C79FA963414A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1785163033-Angry_Birds_Classic_7.0.0_Premium.apk

Path /storage/emulated/0/Download/.pending-1785163033-Angry_Birds_Classic_7.0.0_Premium.apk
Size 12.9MB
SHA256 835cef5c50541dacb90d977574a17fbf44f38cb2b5a57435cb8b83cea3b132b2
MD5 ef7cadb5d3ea23905cf52f64907190a6
SHA1 cc084e1dd52b7a7d58ab53d843b551f8277cbe54
SHA512 d2dfe3f85a14b3159f25b44160ca1a7d2b69b38f1c65679915e769257b85649d650f25bd1f461644cd7d1443e75ab453d97e6a7d090678f7cc814a61c9124573
SSDEEP 196608:wcg1S9geMOfTO3ynX+43QxzaVvXhu9+K12VVjlNMc1e1+IJhva8oh/U/k5aqt:w1SfXTwiX+DxaVo+q2TFIJRsh/Ufo
TLSH
T10FD62368BB11653FF46320FAB6274998D2D87AAF643988D0F571F7D971370B22386183
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1785163033-Angry_Birds_Classic_7.0.0_Premium.apk

Path /storage/emulated/0/Download/.pending-1785163033-Angry_Birds_Classic_7.0.0_Premium.apk
Size 54.5MB
SHA256 4c0a96c48b902516e9973e6e31a4632207bb0f54dd3a1e2ccee27066ac51778a
MD5 98a503bd18f4b092b0e20957770da3c3
SHA1 4169afc6028f7fe44b266e6bf98ed8331a0f764b
SHA512 9a5fa2596033516d5746a48e7320522878d1ce7685deeab3729f069e0978952239cd9909ee9d246acd5b36159eeca91f27c89be6574c718f60b6dd704adc616b
SSDEEP 1572864:ymE56dzFpPZMzC99RfqS7Zbp+tXTwqkwiHL:yF56dzFpPNbX+tXTrir
TLSH
T11DC73324BB85E815CCF1443456AA1587F1345EA88A42E75F2DA871287CFBCD03A5BFBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1785163033-Angry_Birds_Classic_7.0.0_Premium.apk (deleted)

Path /storage/emulated/0/Download/.pending-1785163033-Angry_Birds_Classic_7.0.0_Premium.apk (deleted)
Size 542KB
SHA256 621f877632cf531a878e5750ea24bc35991e0d5be0d4c9a63f05c44687e2b15f
MD5 5663904f1fe2639fb3013a548db981d7
SHA1 20357eb5bfa929674de277a8080207fffa78029e
SHA512 1349997e3305edf3b537d5ddc88f863a373e5903b190a14ea390b40cef054d5ad99bc645b383ee7b0dfa6dcf1fe2ffb6041b6d8917cae09926d512da5127c3c9
SSDEEP 768:UsYT8MfR3kiqhqQEGpQyi81O22H6wtRzxIP7Ylc:/YJp3kiU3Sy4H6wDzxIDYl
TLSH
T1C7C4E16942EF7544D0F8663DAC1FA04A0C2E5BA97F8CED440EDD07D36C79FA963414A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads