hxxps://github[.]com/ytisf/theZoo

Resubmissions

23-04-2024 22:06

240423-1z3agacd59 6

23-04-2024 19:46

23-04-2024 19:42

23-04-2024 19:38

23-04-2024 17:41

23-04-2024 17:35

23-04-2024 17:34

Analysis

max time kernel
131s
max time network
143s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
23-04-2024 17:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/ytisf/theZoo

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

Legitimate hosting services abused for malware hosting/C2 1 TTPs 6 IoCs

Web Service

T1102

flow	ioc
53	raw.githubusercontent.com
40	camo.githubusercontent.com
44	camo.githubusercontent.com
45	camo.githubusercontent.com
46	camo.githubusercontent.com
47	camo.githubusercontent.com

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4342

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
226KB

MD5
9c18be8e2ccf3ad7c26b5484dd9a6674

SHA1
9337058e672649fd2496de15855d373a56f88d68

SHA256
e91c87da50e42bfdcfd8d91ebc13180c689fab7d2db4a20ed5ec37638d5aedee

SHA512
8d4162d37fbf38f28c4785d3f90caf022e05dcc5edf1b79859d5b366bcc552640063b733b0fa4a289ca4bddeb10b62db5ceae0dfebb99a54257d8cef0411fa35

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads