hxxp://p[.]clickby[.]net/s[.]php?ver=2[.]0&c=28835&d=9JSOwMzM1EGN1EGOyMmY3YzMiojIklWYiwiI5IiOiUWbh5mdiwCOyojIklmdiwiIzA1XylWQ2kDWiojIsVGZv1mIsIyYpd2bsRWavJHRiojIk5WYyJmIsIyMyVGaj5WdhxGevJWbuMWan9Gbkl2byRmLt92YiojIntGciwiI1MDO4IjI6ICRJBlIsISNzgDOyIiOiQUSDJye&t=1713889323501&v=2 | Triage™

Resubmissions

23/04/2024, 16:59

240423-vhhxlsab327

23/04/2024, 16:57

240423-vgcn7sab277

23/04/2024, 16:54

240423-vemfmaaa987

23/04/2024, 16:31

240423-t1n1xahh2y1

Analysis

max time kernel
43s
max time network
50s
platform
android_x64
resource
android-33-x64-arm64-20240229-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240229-enlocale:en-usos:android-13-x64system
submitted
23/04/2024, 16:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://p.clickby.net/s.php?ver=2.0&c=28835&d=9JSOwMzM1EGN1EGOyMmY3YzMiojIklWYiwiI5IiOiUWbh5mdiwCOyojIklmdiwiIzA1XylWQ2kDWiojIsVGZv1mIsIyYpd2bsRWavJHRiojIk5WYyJmIsIyMyVGaj5WdhxGevJWbuMWan9Gbkl2byRmLt92YiojIntGciwiI1MDO4IjI6ICRJBlIsISNzgDOyIiOiQUSDJye&t=1713889323501&v=2
Sample240423-vemfmaaa98

Score

7^/10

collection discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs

Data from Local System

description	ioc	Process
URI accessed for read	content://media/external/images/media	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
- Reads the content of photos stored on the user's device.
PID:4204

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads