hxxps://www[.]indianaunclaimed[.]gov/app/claim-search?utm_source=Adwords&utm_campaign=IndianaOAG_sammy-terry-april-15_20240408&utm_medium=Video&utm_content=sammy-terry-april-15&utm_agency=PG&gclid=CjwKCAjwz42xBhB9EiwA48pT7wtgVqVsXj78Yjf6YJCs4c1bGUg_LIDMfQi6b4Acl2GoGLGYk6ep8BoCSuEQAvD_BwE

Analysis

max time kernel
117s
max time network
150s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
20-04-2024 21:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.indianaunclaimed.gov/app/claim-search?utm_source=Adwords&utm_campaign=IndianaOAG_sammy-terry-april-15_20240408&utm_medium=Video&utm_content=sammy-terry-april-15&utm_agency=PG&gclid=CjwKCAjwz42xBhB9EiwA48pT7wtgVqVsXj78Yjf6YJCs4c1bGUg_LIDMfQi6b4Acl2GoGLGYk6ep8BoCSuEQAvD_BwE

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/cpuinfo com.android.chrome
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/meminfo com.android.chrome

description	ioc	process
File opened for read	/proc/cpuinfo	com.android.chrome

description	ioc	process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4121

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
4KB

MD5
d82060d4d54683f0668c548983f9a940

SHA1
de98d997248fdd7d7a1fbd1eeb77265037b43ea3

SHA256
fd5028c1a81981d519460a858653b1d0a3b2d5d2f98ab0e2ea82409a76c9965b

SHA512
e096bcf5bef505099a51886af6f30341d9c9fa007a43f6c5ab8c46fafab0283816154816f982e9c57af7ba9a9beca605ecfbb2f7c0b1e5465b1b7c4d9cd54931

Download Submit