hxxps://drive[.]google[.]com/drive/folders/1cJSe5ydLOicdy3V-F08Q4vdJoYjBXG0R

Analysis

user interaction
yes
max time kernel
643s
max time network
895s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
24/08/2026, 20:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://drive.google.com/drive/folders/1cJSe5ydLOicdy3V-F08Q4vdJoYjBXG0R
Sample260824-zfxefacl21

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
9	drive.google.com
11	drive.google.com
12	drive.google.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4981

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 2KB
SHA256 c660c8174745c6e35a53dd9f8236c9e6e37fc9f6ca8caa5b726d1039c236a88d
MD5 75e686307429f84aca32c40b3377224f
SHA1 d5c7acc730b20da051f01f116cfefa495d9aa6ea
SHA512 d729fc8e5be44e29428c7a1e03e3eb240589ab78def1c23adba41580ca432cf631117cc42d3f33e0263aff884570d94d9872e03f8bcd187d8d6bb2c9aebaa086
TLSH
T1FD41B561F216452D1D23C7D8ABEAB3833071C746D5971ED0B138C329AFE980577A366B
MD5 SHA1 SHA512 TLSH

Submit Download

Unconfirmed 216735.crdownload

Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/Unconfirmed 216735.crdownload
Size 13.6MB
SHA256 ed6c7127686ed6162d23cab661af84c252e67f7bf10e22a746e5a1a3eeb16a9f
MD5 424f022443bcdcfed28793e559773f9b
SHA1 5e762af877c7a950640bcb8ef0a4940cae266816
SHA512 f52452dd3efbf0a4294aaad69b8a88403c885a4f2b74047a772000261c0c5b42c5d3f76285a37870af07cb4d3dcc2e369b061c7a4725ab808eb38ffc088fcab6
SSDEEP 196608:CRMS1WHKAlIfN6ddUPfWQGRT2DAVV+j7nJ1ccve+QhXfEXTRfQp93Oc1+l:CuS1A/ZdUPfC20+J1ccve+pVfQp9Xc
TLSH
T1BEE612C3F3B8892ED8B644B2885D9575691B4D20C993DF4A2D4837987973AE83FC47C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads