hxxp://ptoszek[.]pl

Analysis

user interaction
yes
max time kernel
54s
max time network
56s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
24/08/2026, 17:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://ptoszek.pl
Sample260824-vm1cfsec42

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
46	discord.com
62	discord.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 5 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks memory information
PID:3211

com.android.chrome
1⤵
- Checks memory information
PID:3573

com.android.chrome
1⤵
- Checks memory information
PID:3628

com.android.chrome
1⤵
- Checks memory information
PID:3833

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4037

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

.com.google.Chrome.ODX6b2

Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.ODX6b2
Size 221KB
SHA256 8925047466d708bf7bae0b1ddf70c302790f4388b2c747a03fe769e8eb8da39f
MD5 d022efd45e61d3834c4c04d1592ad8ed
SHA1 d021d763e742b2e859d5ae2a6be10615bc65c198
SHA512 c80b5b7f29eaf1c7c9a78661cd055b54316ca70bef6737e11468bbc66bcca1eb7fc05ead65b238094aa026e854f16fd12f3384818342586c3cc2f6814804e917
SSDEEP 6144:AByITd5c7FDEbRk5cY9oc4IIKV9yCt4+Vnw1ni8d:AI+iSlj8NfV9r43ik
TLSH
T1AA2413F82B073168A580FAF0952A496C70DAD9C1710EDF1C6557DA7878E1FC1CDB2ACA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1788196066-media_images_ptok.jpg (deleted)

Path /storage/emulated/0/Download/.pending-1788196066-media_images_ptok.jpg (deleted)
Size 733KB
SHA256 f18752ef26812c5256d3615fd2d3546b0eeeda8d31834dd3f26a9a1913547f1f
MD5 49cbfa0cc7c3e63b555d4a75bde296c3
SHA1 5a012820a563e5ea14d78bd90e27cb851dd3b34d
SHA512 5f344041df9dbf3395d07944ba0393611a0d28f0958fe070e24f99b8700e80c20bbf46875e297507cd7c5b39bc5951abc065c3eec63b517a7069ef492bddec24
SSDEEP 6144:AByITd5c7FDEbRk5cY9oc4IIKV9yCt4+Vnw1ni8:AI+iSlj8NfV9r43i
TLSH
T1C9F413F82B073168E580FAF0952A496C70DAD9C1710EDF1C6557DA7878E1FC1C9B2ACA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads