hxxps://aka[.]ms/ghei36 | Triage

Submit
Reports

Overview

overview

7

Static

static

1

URLScan

urlscan

1

https://aka.ms/ghei36

windows10-2004-x64

5

https://aka.ms/ghei36

android-9-x86

7

https://aka.ms/ghei36

android-10-x64

1

https://aka.ms/ghei36

android-11-x64

7

Sharing

Copy URL Twitter E-mail

General

Target

https://aka.ms/ghei36
Sample

230816-hpatcsac6t

Score

7^/10

android microsoft evasion phishing

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://aka.ms/ghei36

Resource

win10v2004-20230703-en

microsoft phishing

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

https://aka.ms/ghei36

Resource

android-x86-arm-20230621-en

android-9-x86

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

https://aka.ms/ghei36

Resource

android-x64-20230621-en

android-10-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

https://aka.ms/ghei36

Resource

android-x64-arm64-20230621-en

android-11-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  
  https://aka.ms/ghei36
Score

7^/10

microsoft phishing evasion
- Acquires the wake lock.
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
- Removes a system notification.
  evasion
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Matrix

Tasks

static1

urlscan1

behavioral1

microsoftphishing

behavioral2

behavioral3

behavioral4

© 2018-2025

Terms | Privacy