hxxps://www[.]radicigroup[.]com/newsletter/hit?email=%7B%7BEmail%7D%7D&nid=41490&url=hxxps://pub-812f0673288845f4bf7f094981a2df19[.]r2[.]dev/index[.]html#test@test[.]com[.]au hxxps://pub-812f0673288845f4bf7f094981a2df19[.]r2[.]dev/ | Triage™

Analysis

max time kernel
2948928s
max time network
151s
platform
android_x86
resource
android-x86-arm-20230831-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
submitted
19/09/2023, 23:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.radicigroup.com/newsletter/hit?email=%7B%7BEmail%7D%7D&nid=41490&url=https://pub-812f0673288845f4bf7f094981a2df19.r2.dev/index.html#[email protected] https://pub-812f0673288845f4bf7f094981a2df19.r2.dev/
Sample230919-3eckesee22

Score

6^/10

evasion

Malware Config

Signatures

Looks up external IP address via web service 3 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
41	ipinfo.io
47	ipinfo.io
48	ipinfo.io

Removes a system notification. 1 IoCs

description	ioc	Process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.android.chrome

com.android.chrome
1⤵
- Removes a system notification.
PID:4107

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads