hxxps://github[.]com/Endermanch/MalwareDatabase

Resubmissions

24-04-2024 21:18

240424-z5lz1ahg5w 7

24-04-2024 20:42

240424-zhc4kshc4t 10

24-04-2024 20:40

240424-zfxefahb91 7

24-04-2024 20:37

240424-zelljshb71 6

Analysis

max time kernel
1798s
max time network
1792s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
24-04-2024 21:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/Endermanch/MalwareDatabase

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
21	camo.githubusercontent.com
27	camo.githubusercontent.com

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
110	freegeoip.app
111	freegeoip.app

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4157

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
69KB

MD5
a4170b4de13691b5ded10ffd60bc052f

SHA1
378547a9572db9074f31489e38c846bdc53cd9a0

SHA256
cb446209e783ccfdde25ab17246dc2d3e934d903f588f4da3ee02652641870ac

SHA512
d7d4837528fc6197722234094f8a186abbd4ac5c906709c4dfee24ae540c73666a97ed185e67a260b2673a624a68efe76997524442a81da496e74a945672d310

Download Submit
/storage/emulated/0/Download/.com.google.Chrome.IpBs69

Filesize
256KB

MD5
5a7a1acf43e76f72058a5e0805d2304d

SHA1
a79ab3559a7e2002c7661a3c144ea0838a42ff36

SHA256
09eaebefef611cd74176aa3788e48039a5b57a81e6f366356c8e61396f62273a

SHA512
7d6d684cc1a07e0ab66a7d031357c75a92710e5c6326ed0800026df9ae8a6523b47356f0914fc552bdf82d5605a44570e69de82e151103855224a4f27d1749c0

Download Submit
/storage/emulated/0/Download/.com.google.Chrome.UKuCoN

Filesize
64KB

MD5
dd67db51c53a4df87fd1613e9d9501c7

SHA1
1af9d2efd6f70e91b02e75aec6e9790c0bb62e5e

SHA256
b3ac63a6df7a794525dde9d16819942671692175b08e0ee914aec722b8d2ba81

SHA512
edec67b6f187c858dd76158fa40d92a653a6458881d26c41543e8885d1b93dc5ba98a84058113372c1076a6d302a708d738f4c5356af6fcb03c6d30005d57ed6

Download Submit
/storage/emulated/0/Download/.com.google.Chrome.WSbcIm

Filesize
172KB

MD5
b826d38eab72a98affd8c8360d76467e

SHA1
2d39e701f27b1d1b86fe5278ce48e72d69b0dd80

SHA256
e60f1b3ed5c8ae886880aa7cbf388d09ab1e10f8f75d96b8b3860ec6336ec783

SHA512
d0a26697632885f5964977ec0c239165ef42bab6a78953f29a2e9f821e3751685654e7c70a6abc56397f0b8917ea204cf04e5aaf55506584e3af4cde26e8be88

Download Submit
/storage/emulated/0/Download/.com.google.Chrome.npiEzb

Filesize
84KB

MD5
72ec4b6ee6ce5bcc785ca6af14f2f1f5

SHA1
67f8e1875aeda4f249bca57618eacf09d4a059f2

SHA256
71c12a9802b1e406ba3a632a127ef1c189a374056add0c3093357bbff5ae5ecd

SHA512
ef321f034d87e8428fb451365fb9ff5d4922df0652ff8ee0b1c70b3aa94700548b9db8167db5111c1d19db8f369895c7c959668aafcc765020b3bbb1a0f43932

Download Submit
/storage/emulated/0/Download/5251a356421340a45c8dc6d431ef8a8cbca4078a0305a87f4fbd552e9fc0793e.zip.crdownload

Filesize
2.5MB

MD5
ae0353a2f952bd2988ca6f45be359104

SHA1
31876cf8a5a866251a49d1f40b2fcd2326b0ebaf

SHA256
2c6d81026c661c3b5960a249640ffbe8dbad24430f2f2cf74fc6c98d74695b90

SHA512
5019bcc8bbc9a306cfce7e6259c8d98cd4ec34446c873312aea336a5f683c419affc6d7f33f9b4855cbbef4dc505e47d791e8aae5fd4aa28231dfacf854489b2

Download Submit
/storage/emulated/0/Download/Unconfirmed 20066.crdownload

Filesize
164KB

MD5
a00b03cc51e95531814f6e14e4bb8f55

SHA1
803bdf3629c40776b8fe5bd703e7011866528928

SHA256
a4037c1be731890b78eeaf6b5c2cf4205b9cce7bd91a81401896e334153db581

SHA512
26cb64f05d46dc3ac69bef731ac0d12653d78ea5a00c7bd3fbe3fdc822379cfe42436ff43a39fb157850b4c1ff5a57ca483f7eca5f2dfd366452f5f51e1bac46

Download Submit
/storage/emulated/0/Download/Unconfirmed 692535.crdownload

Filesize
148KB

MD5
66c2504ab4e440d65190a8712cc1b143

SHA1
8b2c0b42cf57ce943404d1ddc31893db4cf74095

SHA256
6faeddf27d66750144f1071937786767f997c90ef349793872e7734de21ad47f

SHA512
293e2e54146e3f94d0c59004473a45041bf25062623222cd497499d479307a492442506ae11095f8bef1a588536b82ccae07e96cb5a3aa669e0b3bf70d8a7d29

Download Submit
/storage/emulated/0/Download/Unconfirmed 826511.crdownload

Filesize
460KB

MD5
007e3ce85045f41f3b5780df106ae8e4

SHA1
39b55376efcd2f4c0bef0b382bbffbeef38b09b5

SHA256
edb77b9ff47359d775c0483ba448f48f52a9d79246cfafde9db984250f3e1926

SHA512
75b6f57b3f25f5540552edf486caaa725e2bb9bfcb1841c7c91c18190faf5aef3075688e44cbb24e356e7cec0858414f0cb07df21531dda71166ddb7955c4600

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads