hxxps://github[.]com/Clementsales/New-Order-Request-for-Quotation/raw/refs/heads/New-Order-Request-for-Quotation_pages/New%20Order%20Request%20for%20Quotation[.]lzh

Resubmissions

12/08/2026, 07:24

260812-h8dpcs1epa6

12/08/2026, 07:03

260812-hvslcsxzas6

Sharing

Copy URL Twitter E-mail

General

Target
https://github.com/Clementsales/New-Order-Request-for-Quotation/raw/refs/heads/New-Order-Request-for-Quotation_pages/New%20Order%20Request%20for%20Quotation.lzh
Sample260812-h8dpcs1epa

Score

6^/10

android

Malware Config

Targets

- Target
  https://github.com/Clementsales/New-Order-Request-for-Quotation/raw/refs/heads/New-Order-Request-for-Quotation_pages/New%20Order%20Request%20for%20Quotation.lzh
Score

6^/10
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426