Analysis
- user interaction
yes - max time kernel
168s - max time network
247s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
11/10/2026, 17:11
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://drive.google.com/file/d/1EB1qrp3PG1qZO6c77BmjcXHDfbOrQiKa/edit
Resource
android-33-x64-arm64-20260708-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
https://drive.google.com/file/d/1EB1qrp3PG1qZO6c77BmjcXHDfbOrQiKa/edit
Resource
android-35-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target https://drive.google.com/file/d/1EB1qrp3PG1qZO6c77BmjcXHDfbOrQiKa/edit
- Sample261011-vql91atzfx
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 27 drive.google.com 28 drive.google.com 32 drive.google.com 33 drive.google.com - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.android.chrome - Checks memory information 2 TTPs 3 IoCs
description ioc Process File opened for read /proc/meminfo com.android.chrome File opened for read /proc/meminfo com.android.chrome File opened for read /proc/meminfo com.android.chrome
Processes
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.5lxSwJ
- Size 515KB
- SHA256 1e83a3db7d1feaee006cd809273a1ba89a711dacde30ee6962f9dada90365017
- MD5 59088bf92424ded2cc794e2dadedf855
- SHA1 cabbb3e97e8e6fb16ef8bf354108ee5cf44bcc71
- SHA512 f7b340d09dfb0195dcc794d5f356fd62127460b3f584721c152284b27b95f0d4fcd2f8aa5560fa4fe2121ce652d6d0c0b5aa579c073016aa57b6c2e4fde918fc
- SSDEEP 48:/B77Tq/HZyoscB78BwNFsPaa4AtInBL/BeDg6PmI1xrnG76jqO2rSfni89U:pzEJsaa4At8p2eIbrGGjqO2rSaY
- TLSH T180B4A6B37A015526D313C5F8E7D3FB4EA2B14346A00788E0745A0394E7EC64DB6AADE7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Download/.pending-1792343534-rtok-1.6.1.apk
- Size 1.5MB
- SHA256 86b2251203ac810b0f9b6548d8d1a62c3e894306eef806f6f55c26ab6b0024d1
- MD5 aaeea84a534d124efe592032dbb3bde1
- SHA1 97639f4551ff8eaa4f7baa508dbed3c82de8f2ae
- SHA512 f6cfd90baee5d4829988cb14b143045e2704031ce73dda520dfb7fbb90ba080df948d2ed2c666ecbd9346538e416322a0a82b18171988cf29a353cf0a499e8fd
- SSDEEP 49152:RdhxXcmT/5vYVDz7ZMqbsyT0iYxj/zQugF2m:RdVhvYVDiIsBHj7Qh2m
- TLSH T1D5750182F3D99D2FCD7744364FAA57351222AD128E96DB07A494372C6D3B2C84F89BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Download/.pending-1792343534-rtok-1.6.1.apk (deleted)
- Size 531KB
- SHA256 dd5685446503ea977d8302f2b8c8fb40284fea108465d7bab7ea3b5a28518031
- MD5 a500a5534a8d6dffbe63c873d3558da8
- SHA1 97195a3166beedf39c1bf5f1feaf94f10be93f92
- SHA512 816719f7b09e2037669af578998196360377890922d783ef77533371d4ab961f74285d68ab604d5da94653b1c82b592a90ec7e92c3b0e212fbe6b97696d75052
- SSDEEP 768:ug/Bdhi2qUzvkJvwq5Q7Z5AJaQ6emihPGW:pJdhi1ULkJLGTAHhPL
- TLSH T1F9C4C05EAD3C0889DFFBE770C64261708442EBB9454649F82A85352EA8B26DC707DE27
- MD5 SHA1 SHA512 SSDEEP TLSH