hxxp://wearedevs[.]net

Analysis

user interaction
yes
max time kernel
195s
max time network
206s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
21/08/2026, 06:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://wearedevs.net
Sample260821-gxea3sysct

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 4 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:3247

com.android.chrome
1⤵
- Checks memory information
PID:3682

com.android.chrome
1⤵
- Checks memory information
PID:4116

com.android.chrome
1⤵
- Checks memory information
PID:4715

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 56B
SHA256 09bda72e7c32a69e3268e0ebd8caa33684cbc954dd00c7d93a38830e348ef324
MD5 cecb649cb1fb79c3736936fcbef3bbf2
SHA1 2c95183d7d2b0cd68d15b3c4115189351fc08720
SHA512 b8aca3cf0ea838093bd29b70ead608597260b0e35886d491d17c304878f99510fd885d96a191080acb5b706a642253bd9cbe5065ff234472b048fcce282061de
TLSH
T13C9002FDA4611009AC2037C01CC122561C1683E430824A0029C23474999432A9C0228C
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof.AfUoMY.tmp

Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.AfUoMY.tmp
Size 19KB
SHA256 71b06c474d9349a28c15c94b92967f244135e19fcd2213b0b2f0ede01582121b
MD5 a80d4e3cc404848d5b44db32a8765c29
SHA1 0f76cd7e1f88ce2df77a3f36e93ed5fe07f24a5d
SHA512 4afaca2b9e237c8be24f2620601afe926b441d2434df313b8eea7f0541260dd6d4d5105fc673f52d46b05623f9d224fef6172b3669d17aa2f16c1cd879354d66
SSDEEP 384:qbgumYgtcjBSYn1mq+LstvfcpkZnY3TDWDmWmy//m2peoC11mxUSUqtZ3:qVtpUsJfcpvvr14SQGeF
TLSH
T1C092D0CECD45B10AED48833BAB5C2C01F8B0E6154105DBDD9B76C761AC2EBAE85E3712
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.Pxpw4f.tmp

Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.Pxpw4f.tmp
Size 18KB
SHA256 ed04a895791e2673312969f2ba641fd9c94e8a3e06ad9d4aae58a9f3b84061c3
MD5 1c766a1d665de5edd8772d30b1c28006
SHA1 16898e40d6548c1df8747ecec5cb386ec5d8ae6d
SHA512 c4615f2cd458abb11ed7c7c218b4e04c1a5df3bd02248cb6303d2844e2c62da2bf0b89554ef553d059161945f89b8334557139622e931b5672ba8c5ef2a8e021
SSDEEP 384:AbdKbCh382TR9lyW5mNkFSJYMa7Ts7rWIdpBqdy75KGkkMb89jwuLF5NvSr+WJvh:AJKmq2FUNkFSJYVs7qIlG2w3kaaUu7N8
TLSH
T19A82C018E00995B6FD9EE9BE309473B0E4C0B05361049E72D13E385DFBB4AE66FE8854
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.com.google.Chrome.SWuM3t

Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.SWuM3t
Size 150.6MB
SHA256 aab977d7c42e79151df437118dec9b06d1d4693262ffd642ff44086efd025259
MD5 a234a4c5185136a678554828e3e37b01
SHA1 15cbb264a3dd011ae0b42a012697dff711c4f9a9
SHA512 4d5bfb9a91d2ce7aaead06c83900c328f0b3904ecec7c49168c1adb6759243cc65f42a9974063d9b8198f3a58e48395bcab8352b1d454ab47a41a1e4f839d5a3
SSDEEP 3145728:FIQgwQ5W9UVudBMwaujcOqSErPJER1DBc3WVDcPOXPE:FhbQc9guEAq5ER1DFZE
TLSH
T18778E009F2824E23DE2A4B399AB793957735EC5D9B13CB6F20087174BE773C44E816A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1787897521-Delta-2.733.988.apk

Path /storage/emulated/0/Download/.pending-1787897521-Delta-2.733.988.apk
Size 150.6MB
SHA256 ac6430a8ab6ff6a199babbe51153b938c0b7977f9752459fad8d62c5148879c1
MD5 d2246932f939538667160e0424350360
SHA1 dae3913e79732f26dea6432896c26bae44928b67
SHA512 0243dcbc461ecf3ddc1802be3ff70b376f14c5e6e5312211e6c99b6dad6eb745b5f28fb6f570a4e4cd0420604b29526c02bacc12c19bd9a952a111bbd9122694
SSDEEP 3145728:LIQgwQ5W9UVudBMwaujcOqSErPJER1DBc3WVDcPOXPE:LhbQc9guEAq5ER1DFZE
TLSH
T18C78E009F2824E23DE2A4B399AB793957735EC5D9B13CB6F20087174BE773C44E816A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1787897521-Delta-2.733.988.apk (deleted)

Path /storage/emulated/0/Download/.pending-1787897521-Delta-2.733.988.apk (deleted)
Size 151.1MB
SHA256 4b85ea02cafc1004f45659701cb674f56170204ff2c5b07dea3c6dea79bba9d5
MD5 d9219e82724d23911207f4decdd670b1
SHA1 833e78ab5cc9e9f325770fc1574fb9aa62694b75
SHA512 1628fe92ed7bfd8076c11b180dcee74fec44c16ece2a708181d628ca6a9ac8ffe6d2b3d08c0c6ff56ee3572538eb94f150ad5eb1b97659f2d9bfa395fe9a7832
SSDEEP 3145728:FIQgwQ5W9UVudBMwaujcOqSErPJER1DBc3WVDcPOXP:FhbQc9guEAq5ER1DFZ
TLSH
T1BC78E009F2824E23DE2A4B399AB793957735EC5D9B13CB6F20087174BE773C44E816A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads