hxxps://eblast[.]ewu[.]edu/t/y-l-xtdkiut-dkhilywdt-r/ | Triage

Resubmissions

08-04-2024 20:43

240408-zhmb9abd65 7

07-04-2024 00:53

240407-a8vzmsgb5x 7

07-04-2024 00:50

240407-a7e7ssga9t 7

06-04-2024 22:31

240406-2fj58adf36 7

05-04-2024 19:34

240405-x997aaca5z 7

05-04-2024 15:42

240405-s5sn8agd82 7

05-04-2024 15:40

240405-s36s3afh2x 7

05-04-2024 06:27

240405-g72jcsec45 7

05-04-2024 06:26

240405-g7g5qadg3w 1

05-04-2024 06:23

240405-g5fh4sec24 7

Analysis

max time kernel
38s
max time network
42s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
05-04-2024 06:01

Sharing

Report Analysis Logs

General

Target

https://eblast.ewu.edu/t/y-l-xtdkiut-dkhilywdt-r/

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4359

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads