Analysis
- max time kernel
2949030s - max time network
152s - platform
android_x86 - resource
android-x86-arm-20230831-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system - submitted
19/09/2023, 23:26
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://pub-812f0673288845f4bf7f094981a2df19.r2.dev/index.html#[email protected]
Resource
win10v2004-20230915-en
Behavioral task
behavioral2
Sample
https://pub-812f0673288845f4bf7f094981a2df19.r2.dev/index.html#[email protected]
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral3
Sample
https://pub-812f0673288845f4bf7f094981a2df19.r2.dev/index.html#[email protected]
Resource
android-x64-20230831-en
Behavioral task
behavioral4
Sample
https://pub-812f0673288845f4bf7f094981a2df19.r2.dev/index.html#[email protected]
Resource
android-x64-arm64-20230831-en
General
- Target https://pub-812f0673288845f4bf7f094981a2df19.r2.dev/index.html#[email protected]
- Sample230919-3fbphsee23
Malware Config
Signatures
- Looks up external IP address via web service 4 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 43 ipinfo.io 54 ipinfo.io 55 ipinfo.io 35 ipinfo.io - Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag com.android.chrome