hxxp://darknet77vonbqeatfsnawm5jtnoci5z22mxay6cizmoucgmz52mwyad[.]onion/

Analysis

max time kernel
122s
max time network
154s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
08/08/2026, 21:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://darknet77vonbqeatfsnawm5jtnoci5z22mxay6cizmoucgmz52mwyad.onion/
Sample260808-z84dfsvdrd

Score

1^/10

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4355

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 151KB
SHA256 83bc89c9d18a9884dab618a8a2a13f9c4466d3eeebc58961caef31e3e78afbc6
MD5 b2d704167c1d06fe2a32643a7339335b
SHA1 01341cf738ee7000fae81dec26c06a554196d946
SHA512 47f710ed4cf9fd6f97532db3b8d92372f3470c45a73c9f36726e908d5ba03668c9e8a197ddb6d9e09546991c1f20c96797144b96b3505209267945f1763327cb
SSDEEP 3072:WuEOZfnjN3EupEVIubBs+W37f9YzMy8UT74Tk/po9J3pW5nt:DEOT3duIubBs+W7W2G74Qon5st
TLSH
T10EE36EB332A10639469A9099A0479308BF75F5839105DCBD7AECBAD8BFC9D411077BBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads