hxxps://drive[.]google[.]com/drive/folders/1cJSe5ydLOicdy3V-F08Q4vdJoYjBXG0R

Analysis

user interaction
yes
max time kernel
372s
max time network
893s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
24/08/2026, 20:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://drive.google.com/drive/folders/1cJSe5ydLOicdy3V-F08Q4vdJoYjBXG0R
Sample260824-zfxefacl21

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
6	drive.google.com
7	drive.google.com
8	drive.google.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4334

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 2KB
SHA256 42815d3d61c6dec5956605fb113206cf76ec9e3b1c3df5efd453a7e21e9672e1
MD5 64d6c5f1fd26cfea390c8365cc195ffd
SHA1 30d9a9551a19ce2def2c6575334a16fdef6768bb
SHA512 282454886e22956f5dbcb2fe8518fceb754ba17e6c35bccc588afcdd9e29ad6c0578a8e62c07e9d131bfd83ea4e408a97d5cc19acaece0010a89947f2d3936d5
TLSH
T19E41B761F215452D1E23C7D4ABD5B3833471C745D2971ED0B138C359AFE9805779362B
MD5 SHA1 SHA512 TLSH

Submit Download

.com.google.Chrome.N46AEw

Path /storage/emulated/0/Download/.com.google.Chrome.N46AEw
Size 256KB
SHA256 6dc81879443925a15ed1520f3a80b6e4392f26d4fe42cd4f10da72c0d950fc13
MD5 c310c337be82dfb99b8f9611a5113642
SHA1 a7e4df84ad76969636dbfe26d83cb2ed63af9ffc
SHA512 e524a18c61210b9d7f1bf317d77e28171fa12e48763741c003f9ea4f88fa9cce545418bd79e7185afa618cecd66f8811a1c73dc7c456d1a3dce221e7bbd18077
SSDEEP 6144:/c5CispW79Id+0tn0WjEHsQS1VRSw3L3w56LIrQmxq1bFxaqeS:/qCisp09iSWjELS1b3OWI8RNnX
TLSH
T1DB44237DEEA92635C442499A5CC8FFB1012B471B243065B27C4FB78ADF6A1F50335E68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 923888.crdownload

Path /storage/emulated/0/Download/Unconfirmed 923888.crdownload
Size 13.6MB
SHA256 8fac5ec96a997a1d673b843218eebcb936405a8106d8c5156351b9fc988dfa04
MD5 8165d1e643ebb4c10ab592dd04b3a881
SHA1 917a9601737b715d4293c04d28354b2b6bd0fd4c
SHA512 c5612ef39aed91ed42442f16f2f32a38b25d57eba1ab339a4b652aa1f756f4165dd9808c46dcb31b8a6c804bcfb0c3f8924ce50c3aa087fe597380a148b3dd9a
SSDEEP 196608:WRMS1WHKAlIfN6ddUPfWQGRT2DAVV+j7nJ1ccve+QhXfEXTRfQp93Oc1+l:WuS1A/ZdUPfC20+J1ccve+pVfQp9Xc
TLSH
T1B2E612C3F3B8892ED8B644B2885D9575691B4D20C993DF4A2D4837987973AE83FC47C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads