hxxps://wndr[.]azurewebsites[.]net/completeRegistration?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9[.]eyJ1c2VySWQiOiI5RmdBOEg0V2h0TzU3bU1xcTdHdVciLCJpYXQiOjE3MDg2MTA5NjMsImV4cCI6MTcwODc4Mzc2M30[.]vzBbfmHZsUhHFznBEL-ggUdP_AH-pYDUOeIWjXToMgM

Analysis

max time kernel
459s
max time network
468s
platform
android_x64
resource
android-33-x64-arm64-20240221-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240221-enlocale:en-usos:android-13-x64system
submitted
22/02/2024, 16:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://wndr.azurewebsites.net/completeRegistration?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiI5RmdBOEg0V2h0TzU3bU1xcTdHdVciLCJpYXQiOjE3MDg2MTA5NjMsImV4cCI6MTcwODc4Mzc2M30.vzBbfmHZsUhHFznBEL-ggUdP_AH-pYDUOeIWjXToMgM

Score

7^/10

collection

Malware Config

Signatures

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://media/external/images/media	com.android.chrome

com.android.chrome
1⤵
- Reads the content of photos stored on the user's device.
PID:4381

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Data from Local System

T1533

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
6KB

MD5
bf9edcb9aabf1f5f85d7971db863993c

SHA1
e292fc972d7f43d7a8b813cabad28bbd06d5c68e

SHA256
07de35ef4c01c336acc7df9e686016ea15649faea27753f3a7daa401456b1141

SHA512
192e07db2cd89cee40d3feedd07dc6831d0f6ae5bbbaefab1299dc5388ddf456eeab809f1265ae66690d42b52bc86b7a7b8be28296d6dc247274f5483bcd6fb7

Download Submit
/storage/emulated/0/Download/.pending-1709225211-Red Bull MOBILE Data_ eSIM_1.7.0_apkcombo.com.apk

Filesize
4.8MB

MD5
67ff74df1912a9cd3795c3287eeac3e2

SHA1
f9dafb9eb80192f7b4c77ad2bf5e09fd61eb0f32

SHA256
cb3f6eb8d06881b6974c95585d3e413a79ed20c124e2b8e74a47fccb0486077e

SHA512
52a290f3025ae383c2a1018e8e8952b153f8034b6c1383524631c211c76682265b69d51d5cdb75c8fef16592808739ce2a3239a14e7544a3b2c464b18e7a9fce

Download Submit
/storage/emulated/0/Download/.pending-1709225211-Red Bull MOBILE Data_ eSIM_1.7.0_apkcombo.com.apk (deleted)

Filesize
2.6MB

MD5
0ae493ffb66dec3feeb92417367a3a02

SHA1
ba513472e6090726a089f9385f8eb48d938e41b9

SHA256
d61b5836e098a310682383d2eddca3143967b52efa3eea637cba59d37afae6f3

SHA512
5558bbd3a9c19acb1461d5ec7ab06a812edbf60e4094a5cb1ba3741e5901a9a772105251e570936d55c7f6855d932a7b920d8aab485e50117b12f3fd373f6762

Download Submit