hxxps://drive[.]google[.]com/drive/folders/1IqbHd-HxKjePvPd10dzEF1uJYPTtpq8l

Resubmissions

07/08/2026, 02:32

260807-c1jyhsyze16

07/08/2026, 02:29

260807-cyvbgaep416

07/08/2026, 02:28

260807-cx8gpsyzds6

07/08/2026, 02:01

260807-cfl75sde746

Analysis

user interaction
yes
max time kernel
137s
max time network
145s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
07/08/2026, 02:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://drive.google.com/drive/folders/1IqbHd-HxKjePvPd10dzEF1uJYPTtpq8l
Sample260807-cyvbgaep41

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
12	drive.google.com
13	drive.google.com
14	drive.google.com
15	drive.google.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 3 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:3176

com.android.chrome
1⤵
- Checks memory information
PID:3653

com.android.chrome
1⤵
- Checks memory information
PID:3882

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 2KB
SHA256 202f92cd429078f123996e2e971ccebe6a08c06252ab8187ef8496aab300c023
MD5 95496d10ecde8dd0ab11a7387dc8c851
SHA1 9f9443bcd695f75e6700bed6cc084441acd15006
SHA512 3c9cd9f9419989c62477f76f36c3736d0ba65eb9bd758d18803d9b48f82e252495d6d8c5a20850ea87ab3f2882d6c92ac0c49f07ed7e9ace654b5dd67ae59657
TLSH
T13B41C761F115892A1927C6D4ABD5B79330B1C292D5D72DE0B438C368EFEA80577A332B
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof.OaUjDx.tmp

Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.OaUjDx.tmp
Size 16KB
SHA256 c1a3e036c59fad0eba4838addc765144d6a60cd934e2e2a3d33a2ae564fa7515
MD5 34a244a9f75a6e2cc1bd3a6778bc59e0
SHA1 eadc96b9d7206c76e0023666fe98c30c6bbaf4ba
SHA512 49cbc668ca0b8d2619d03f5d29bb74fd6d514388e3d06fa1f9f76fec51965115f5bf1440c460c84bf000e13fae1a530b51796e9d94e716bad3763a78a292b780
SSDEEP 384:9bDNs6PMDkoTw9R54CTBga42sHbUVc0HOWwT6zYOre/N4WjOWZ2zL:9dsv1okGBgP2sHAVc0u0/61F5M3
TLSH
T10972E1E47157C2E3F151CAA1B928825B3CDC6BE1DAC3E77B6244713470C93A109A57EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.com.google.Chrome.ZGfA1l

Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.ZGfA1l
Size 20KB
SHA256 c6e356c4828603d020e99aa3a37dad366f9ab7cf270cbaa5c58c92a0ff87e3a1
MD5 05bacdc62c9d18a33f1e00f18903a9a2
SHA1 416ca682080caa82c824297cdac7dfef9a07a9bb
SHA512 28925e921fd57e82225fd66067c6bf82c2f10c3a8a226254f229b8ea8ac3ea52b4f49548983d8c7a3760cacd62b1487825c1d8ec89e4d21f857ed1bb911c4510
SSDEEP 384:Rws1wSlhVAAolc16V1Dxb3we16Vkc16V1DxB7516V0VtrLi:R3wSlhVABc6V9xx6Vp6V9x1b6VM6
TLSH
T1ED92AE96A35AAD53FF3B99B1A679E363AC31FC2492D20741B104F9093CA8B494F507DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1786674656-3 Button Navigation Bar 1.0.apk (deleted)

Path /storage/emulated/0/Download/.pending-1786674656-3 Button Navigation Bar 1.0.apk (deleted)
Size 532KB
SHA256 aacb58c568f27b1bccdb61929e001f9e464db2191bd65ab10caa8cdca7237bba
MD5 095dbc9eabeceb7b561073257d8c28ba
SHA1 fccbce9478b7e2d70f381e74bf58e98a6996f6d1
SHA512 790b3536689591ae57befa3efd73d1794790c11cca9098962c7fc7b6437e1f2652518cbb1be292b20439833e166715d43e82031c5c5508787af18370ffdeb39b
SSDEEP 384:Rws1wSlhVAAolc16V1Dxb3we16Vkc16V1DxB7516V0VtrL:R3wSlhVABc6V9xx6Vp6V9x1b6VM
TLSH
T135C4AE96A35AAD53FF3B99B1A679E363AC31FC2492D20741B104F9093CA8B494F507DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads