hxxps://github[.]com/ytisf/theZoo | Triage

Resubmissions

23-04-2024 22:06

240423-1z3agacd59 6

23-04-2024 19:46

240423-yg1yksbc92 10

23-04-2024 19:42

240423-yetrgsbc62 6

23-04-2024 19:38

240423-ycq8ksbc46 6

23-04-2024 17:41

240423-v9ez2aac97 7

23-04-2024 17:35

240423-v6awxaac93 10

23-04-2024 17:34

240423-v5ll1sac88 6

Analysis

max time kernel
116s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
23-04-2024 17:41

Sharing

Report Analysis Logs

General

Target

https://github.com/ytisf/theZoo

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs

Web Service

flow	ioc
63	camo.githubusercontent.com
69	camo.githubusercontent.com
70	camo.githubusercontent.com
72	camo.githubusercontent.com
73	raw.githubusercontent.com

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4130

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads