hxxps://github[.]com/ytisf/theZoo

Resubmissions

23-04-2024 22:06

240423-1z3agacd59 6

23-04-2024 19:46

23-04-2024 19:42

23-04-2024 19:38

23-04-2024 17:41

23-04-2024 17:35

23-04-2024 17:34

Analysis

max time kernel
123s
max time network
131s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
23-04-2024 17:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/ytisf/theZoo

Score

7^/10

collection discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://media/external/images/media	com.android.chrome

Legitimate hosting services abused for malware hosting/C2 1 TTPs 6 IoCs

Web Service

T1102

flow	ioc
28	camo.githubusercontent.com
29	camo.githubusercontent.com
30	camo.githubusercontent.com
38	raw.githubusercontent.com
26	camo.githubusercontent.com
27	camo.githubusercontent.com

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
- Reads the content of photos stored on the user's device.
PID:5063

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Data from Local System

T1533

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
341KB

MD5
2449177ace539118c86209a24c3a00e9

SHA1
0ccc0f94cb25f3dc54aa2b4222e3e65ba0a76d90

SHA256
7d40cb13e0121c599a2743000852deee2bae4ab4aa00ba9893127a7ad98dcc0c

SHA512
4eb600416344c6309eb7c2dfa749d4b270b0535ace1c0c2d9fb18a00bf6a315df885cab62a1b3575301e22dbd50548f3e3bd4809cd7254281e70ed404b224008

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads