hxxps://eftatotaxrefund[.]info/log[.]html

Analysis

max time kernel
129s
max time network
136s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
17-04-2024 04:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://eftatotaxrefund.info/log.html

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4405

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
85KB

MD5
4a463e0c9d0bfba952687356f7dc3359

SHA1
8527a71a508809fe2348a89f9e0209279b6a1017

SHA256
36ddbb006c8a8245288145fb4412b62be3ce849321084c1d1c24344e0c4cacba

SHA512
59c32a5e63f51ae769c83f0db6e74222254e351935f28b556d77309dbc77007027e14432a06933c741c8016c176f4821348855dabc8153c6a11b9ae547f07ea2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads