hxxps://github[.]com/Endermanch/MalwareDatabase

Resubmissions

24-04-2024 21:18

240424-z5lz1ahg5w 7

24-04-2024 20:42

240424-zhc4kshc4t 10

24-04-2024 20:40

240424-zfxefahb91 7

24-04-2024 20:37

240424-zelljshb71 6

Analysis

max time kernel
1749s
max time network
1807s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
24-04-2024 21:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/Endermanch/MalwareDatabase

Score

7^/10

collection discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://media/external/images/media	com.android.chrome

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
25	camo.githubusercontent.com
26	camo.githubusercontent.com
33	camo.githubusercontent.com

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
- Reads the content of photos stored on the user's device.
PID:5024

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Data from Local System

T1533

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
286KB

MD5
8106986c7385dac76a6f9fd07787d559

SHA1
1c95611222773beda0ae373db68710478d1d64a7

SHA256
11f35aab7f8bec9b059ba838902ab097e29bf0491c461130afdf7a294e659d70

SHA512
dd693e6f1be4ff41ba0d27a5c81097c6fbea561ae1cdbd807f515fd30c268c313cd63bd040673b301e7d0090bb12644e588c1f0ebc7db2412b6c02af80c3f239

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads