hxxps://pub-812f0673288845f4bf7f094981a2df19[.]r2[.]dev/index[.]html#test@test[.]com[.]au | Triage

Analysis

max time kernel
2949041s
max time network
147s
platform
android_x64
resource
android-x64-arm64-20230831-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
submitted
19-09-2023 23:26

Sharing

Report Analysis Logs

General

Target

https://pub-812f0673288845f4bf7f094981a2df19.r2.dev/index.html#[email protected]

Score

6^/10

evasion

Malware Config

Signatures

Looks up external IP address via web service 4 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
68	ipinfo.io
73	ipinfo.io
76	ipinfo.io
77	ipinfo.io

Removes a system notification. 1 IoCs

description	ioc	Process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.android.chrome

com.android.chrome
1⤵
- Removes a system notification.
PID:4427

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads