Analysis

  • user interaction
    yes
  • max time kernel
    201s
  • max time network
    338s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    24/10/2026, 06:42

General

  • Target
    https://www.apkmirror.com/apk/cloudflare/1-1-1-1-faster-safer-internet/1-1-1-1-warp-safer-internet-6-38-11-release/1-1-1-1-warp-safer-internet-6-38-11-android-apk-download/
  • Sample261024-hgszzaas6m
Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 2 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Probable phishing domain 1 TTPs 4 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 4 IoCs

Processes

  • com.android.chrome
    1⤵
    • Checks CPU information
    • Checks memory information
    PID:3195
  • com.android.chrome
    1⤵
    • Checks memory information
    PID:3910
  • com.android.chrome
    1⤵
    • Checks memory information
    PID:4196
  • com.android.chrome
    1⤵
    • Checks memory information
    PID:5359

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        files/dom-0.html

        • Size 28KB
        • SHA256 1e99a104c761a78b70f2a5b22713eb16285c579d81cbf4042723c45958cd4182
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.123h60.tmp

        • Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.123h60.tmp
        • Size 18KB
        • SHA256 0414daf1f3d0341c78cca0b4169fb966d0709b3223c75aa10a7a79e357f1e498
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.Y2w0gT.tmp

        • Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.Y2w0gT.tmp
        • Size 17KB
        • SHA256 0235e01c2a22a5c02acfd9f5d316986f67fd33a344c99d611f6392ece6178c9e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .com.google.Chrome.43oOpA

        • Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.43oOpA
        • Size 54.2MB
        • SHA256 79b439261668eba4a89877d8ffa2b176069610be4957b1554ad95364b5c394d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .com.google.Chrome.ogPSh9

        • Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.ogPSh9
        • Size 55.3MB
        • SHA256 f20759045a160ffa4ddf0a7cdae39873edbbab32e61213980183778dcbe83ebd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .pending-1793429061-com.cloudflare.onedotonedotonedotone_6.38.11-5703_4arch_7dpi_24lang_72f4ccf846fabb571a345af0b5217f7a_apkmirror.com.apkm

        • Path /storage/emulated/0/Download/.pending-1793429061-com.cloudflare.onedotonedotonedotone_6.38.11-5703_4arch_7dpi_24lang_72f4ccf846fabb571a345af0b5217f7a_apkmirror.com.apkm
        • Size 32KB
        • SHA256 810ffb9c652cddd399030638e87a52e418e5b535a5f072d4d51b5abec8b7fbc5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .pending-1793429061-com.cloudflare.onedotonedotonedotone_6.38.11-5703_4arch_7dpi_24lang_72f4ccf846fabb571a345af0b5217f7a_apkmirror.com.apkm

        • Path /storage/emulated/0/Download/.pending-1793429061-com.cloudflare.onedotonedotonedotone_6.38.11-5703_4arch_7dpi_24lang_72f4ccf846fabb571a345af0b5217f7a_apkmirror.com.apkm
        • Size 33KB
        • SHA256 a6e8811dcfc55a29066aeac23e00a5cfbd405f0065880b3923b15fc87fca8fe6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .pending-1793429061-com.cloudflare.onedotonedotonedotone_6.38.11-5703_4arch_7dpi_24lang_72f4ccf846fabb571a345af0b5217f7a_apkmirror.com.apkm

        • Path /storage/emulated/0/Download/.pending-1793429061-com.cloudflare.onedotonedotonedotone_6.38.11-5703_4arch_7dpi_24lang_72f4ccf846fabb571a345af0b5217f7a_apkmirror.com.apkm
        • Size 534KB
        • SHA256 ede0090ef35a6f78c9bc30646e7bfb3a50d736a622e5b81d87e7a77dcba1d43e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .pending-1793429061-com.cloudflare.onedotonedotonedotone_6.38.11-5703_4arch_7dpi_24lang_72f4ccf846fabb571a345af0b5217f7a_apkmirror.com.apkm

        • Path /storage/emulated/0/Download/.pending-1793429061-com.cloudflare.onedotonedotonedotone_6.38.11-5703_4arch_7dpi_24lang_72f4ccf846fabb571a345af0b5217f7a_apkmirror.com.apkm
        • Size 55.3MB
        • SHA256 6e2457ff7659b2a3335661d540fc15c777ebce8eb59ed931c2eadbb5b15c7e4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .pending-1793429061-com.cloudflare.onedotonedotonedotone_6.38.11-5703_4arch_7dpi_24lang_72f4ccf846fabb571a345af0b5217f7a_apkmirror.com.apkm (deleted)

        • Path /storage/emulated/0/Download/.pending-1793429061-com.cloudflare.onedotonedotonedotone_6.38.11-5703_4arch_7dpi_24lang_72f4ccf846fabb571a345af0b5217f7a_apkmirror.com.apkm (deleted)
        • Size 55.8MB
        • SHA256 711375c9f960ff4617ebd089e1b742d5c8a3733660fd8eee9a9852ea5b723df0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .pending-1793429204-com.apkmirror.helper.prod_2.0.3_(41-d04e542)-41_minAPI23(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk

        • Path /storage/emulated/0/Download/.pending-1793429204-com.apkmirror.helper.prod_2.0.3_(41-d04e542)-41_minAPI23(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk
        • Size 17.2MB
        • SHA256 686a6807e2a237bda547dbf309796a92c5eaed838131846c60082460cfb855c8
        • MD5 SHA1 SHA512 SSDEEP TLSH