Overview
overview
6Static
static
1URLScan
urlscan
https://www.youtube....
windows10-2004-x64
3https://www.youtube....
android-9-x86
1https://www.youtube....
android-10-x64
1https://www.youtube....
android-11-x64
1https://www.youtube....
macos-10.15-amd64
4https://www.youtube....
ubuntu-22.04-amd64
6https://www.youtube....
debian-9-armhf
https://www.youtube....
debian-9-mips
https://www.youtube....
debian-9-mipsel
Analysis
- max time kernel
567s - max time network
595s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
08/10/2026, 03:52
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.youtube.com/s/_/ytmainappweb/_/js/k=ytmainappweb.kevlar_base.en_US.q4zxEzgOMq0.es5.O/am=AAAAAAQAEICU/d=1/br=1/rs=AGKMywE1X_4cHJjZUfh56JqMECXCw06MCg/m=kevlar_base_module,kevlar_main_module,kevlar_base_sync_mod_chunk
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
https://www.youtube.com/s/_/ytmainappweb/_/js/k=ytmainappweb.kevlar_base.en_US.q4zxEzgOMq0.es5.O/am=AAAAAAQAEICU/d=1/br=1/rs=AGKMywE1X_4cHJjZUfh56JqMECXCw06MCg/m=kevlar_base_module,kevlar_main_module,kevlar_base_sync_mod_chunk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral3
Sample
https://www.youtube.com/s/_/ytmainappweb/_/js/k=ytmainappweb.kevlar_base.en_US.q4zxEzgOMq0.es5.O/am=AAAAAAQAEICU/d=1/br=1/rs=AGKMywE1X_4cHJjZUfh56JqMECXCw06MCg/m=kevlar_base_module,kevlar_main_module,kevlar_base_sync_mod_chunk
Resource
android-x64-20260325-en
Behavioral task
behavioral4
Sample
https://www.youtube.com/s/_/ytmainappweb/_/js/k=ytmainappweb.kevlar_base.en_US.q4zxEzgOMq0.es5.O/am=AAAAAAQAEICU/d=1/br=1/rs=AGKMywE1X_4cHJjZUfh56JqMECXCw06MCg/m=kevlar_base_module,kevlar_main_module,kevlar_base_sync_mod_chunk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral5
Sample
https://www.youtube.com/s/_/ytmainappweb/_/js/k=ytmainappweb.kevlar_base.en_US.q4zxEzgOMq0.es5.O/am=AAAAAAQAEICU/d=1/br=1/rs=AGKMywE1X_4cHJjZUfh56JqMECXCw06MCg/m=kevlar_base_module,kevlar_main_module,kevlar_base_sync_mod_chunk
Resource
macos-20260915-en
Behavioral task
behavioral6
Sample
https://www.youtube.com/s/_/ytmainappweb/_/js/k=ytmainappweb.kevlar_base.en_US.q4zxEzgOMq0.es5.O/am=AAAAAAQAEICU/d=1/br=1/rs=AGKMywE1X_4cHJjZUfh56JqMECXCw06MCg/m=kevlar_base_module,kevlar_main_module,kevlar_base_sync_mod_chunk
Resource
ubuntu2204-amd64-20260513-en
Behavioral task
behavioral7
Sample
https://www.youtube.com/s/_/ytmainappweb/_/js/k=ytmainappweb.kevlar_base.en_US.q4zxEzgOMq0.es5.O/am=AAAAAAQAEICU/d=1/br=1/rs=AGKMywE1X_4cHJjZUfh56JqMECXCw06MCg/m=kevlar_base_module,kevlar_main_module,kevlar_base_sync_mod_chunk
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral8
Sample
https://www.youtube.com/s/_/ytmainappweb/_/js/k=ytmainappweb.kevlar_base.en_US.q4zxEzgOMq0.es5.O/am=AAAAAAQAEICU/d=1/br=1/rs=AGKMywE1X_4cHJjZUfh56JqMECXCw06MCg/m=kevlar_base_module,kevlar_main_module,kevlar_base_sync_mod_chunk
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral9
Sample
https://www.youtube.com/s/_/ytmainappweb/_/js/k=ytmainappweb.kevlar_base.en_US.q4zxEzgOMq0.es5.O/am=AAAAAAQAEICU/d=1/br=1/rs=AGKMywE1X_4cHJjZUfh56JqMECXCw06MCg/m=kevlar_base_module,kevlar_main_module,kevlar_base_sync_mod_chunk
Resource
debian9-mipsel-20260513-en
General
- Target https://www.youtube.com/s/_/ytmainappweb/_/js/k=ytmainappweb.kevlar_base.en_US.q4zxEzgOMq0.es5.O/am=AAAAAAQAEICU/d=1/br=1/rs=AGKMywE1X_4cHJjZUfh56JqMECXCw06MCg/m=kevlar_base_module,kevlar_main_module,kevlar_base_sync_mod_chunk
- Sample261008-efcd2sbt9n
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.android.chrome - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.android.chrome
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Size 85KB
- SHA256 9276ea37f7a0762818cd117a91c587a8a7990283ed28753a53ef8ad8a56f7932
- MD5 2ebfb2d4e00965685b02ecc24dcb116c
- SHA1 e99da63ae162bb3503eead9488de790159d22dbe
- SHA512 ab7ef78a9c166b688b004ba3993211a69713d6c21e86b182e824fff78669029b0dd552712b3ddd0718ac7c9c506fdd6760b4565b26abed14a32f25a90b465f9b
- SSDEEP 1536:USUvuMasLStLEV4JsPtLUEDdSFiNPw9oMq562tnNcPIWaAlQx+Z3574Tk/OCotRv:USUWZGioVpFLMFilw9oMq562tnNcPIWc
- TLSH T1F683BEAD38E5053E551B80E932AB66047F2450836319DCE3BAED75646F8EAF41433FCA
- MD5 SHA1 SHA512 SSDEEP TLSH