Analysis
-
max time kernel
2949031s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20230831-en -
resource tags
androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system -
submitted
19-09-2023 23:26
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://pub-812f0673288845f4bf7f094981a2df19.r2.dev/index.html#[email protected]
Resource
win10v2004-20230915-en
Behavioral task
behavioral2
Sample
https://pub-812f0673288845f4bf7f094981a2df19.r2.dev/index.html#[email protected]
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral3
Sample
https://pub-812f0673288845f4bf7f094981a2df19.r2.dev/index.html#[email protected]
Resource
android-x64-20230831-en
Behavioral task
behavioral4
Sample
https://pub-812f0673288845f4bf7f094981a2df19.r2.dev/index.html#[email protected]
Resource
android-x64-arm64-20230831-en
General
-
Target
https://pub-812f0673288845f4bf7f094981a2df19.r2.dev/index.html#[email protected]
Malware Config
Signatures
-
Looks up external IP address via web service 4 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 59 ipinfo.io 62 ipinfo.io 71 ipinfo.io 72 ipinfo.io -
Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag com.android.chrome