Analysis
- user interaction
yes - max time kernel
545s - max time network
598s - platform
android-11_x64 - resource
android-x64-arm64-20260325-fr - resource tags
- submitted
27/10/2026, 12:54
General
- Target http://google.com
- Sample261027-p49dssdf22
Score
8/10
Malware Config
Signatures
- Patched UPX-packed file 1 IoCs
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
- Contacts third-party web service commonly abused for C2 1 TTPs 1 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Declares services with permission to bind to the system 1 IoCs
- Requests dangerous framework permissions 11 IoCs
- Probable phishing domain 1 TTPs 1 IoCs
- UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Checks CPU information 2 TTPs 2 IoCs
- Checks memory information 2 TTPs 2 IoCs
Processes
-
com.android.chrome1⤵
- Checks CPU information
- Checks memory information
-
com.android.chrome1⤵
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
files/dom-0.html
.com.google.Chrome.qlgQNd
.pending-1793710596-APKPure_3.20.81_apkpure.com.apk
.pending-1793710596-APKPure_3.20.81_apkpure.com.apk (deleted)
.pending-1793710663-APKPure_3.20.81_apkpure.com (1).apk (deleted)