hxxps://spdmteam[.]com/rosaverx

Analysis

max time kernel
1761s
max time network
1792s
platform
android_x64
resource
android-x64-20240506-en
resource tags

androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system
submitted
07-05-2024 21:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://spdmteam.com/rosaverx

Score

7^/10

collection discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 2 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 2 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome

Reads the content of photos stored on the user's device. 1 TTPs 2 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://media/external/images/media	com.android.chrome
URI accessed for read	content://media/external/images/media	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
- Reads the content of photos stored on the user's device.
PID:5024

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
- Reads the content of photos stored on the user's device.
PID:5837

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Data from Local System

T1533

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
56B

MD5
cecb649cb1fb79c3736936fcbef3bbf2

SHA1
2c95183d7d2b0cd68d15b3c4115189351fc08720

SHA256
09bda72e7c32a69e3268e0ebd8caa33684cbc954dd00c7d93a38830e348ef324

SHA512
b8aca3cf0ea838093bd29b70ead608597260b0e35886d491d17c304878f99510fd885d96a191080acb5b706a642253bd9cbe5065ff234472b048fcce282061de

Download Submit
files/dom-1.html

Filesize
34KB

MD5
a9043d7b0287d40f9239dbe31a43c006

SHA1
087040cb232d06c146516da0de015190d55f8516

SHA256
0621c9205573f82e783adf81220b96bc9c806b6bb0310bb36c349fc868b71e6c

SHA512
1d9318d5226b9489875acd25fb80bd1ff9f921366c8c9119ff991d2583e45e9fbee357c32da159155fd9d9e5d12c12abb68c2272c9761b2d34a35cbe185e7209

Download Submit
/storage/emulated/0/Android/data/com.android.chrome/files/Download/Unconfirmed 860104.crdownload

Filesize
3.2MB

MD5
77839b7902b7dfcf869a75f05e29bc8d

SHA1
17831958646d196361a2367498b55d0d1cb40db2

SHA256
a58dabe93df0b018d5088a03409ebe9be450d37020780a18298b23fea4492664

SHA512
23deceb7a7e16f1333891d3143a3564020425aad85319be62fd734d61616817b512f84d2fb7b52f7b1dc8614c64df9c9e8d014c1dc901413d89dbb1828b4af52

Download Submit
/storage/emulated/0/Download/RoSaverX (1).apk

Filesize
3.7MB

MD5
3554ea87c6d4809f2210d7c9eb2c2d13

SHA1
dcef831b95bab74b11db629ec5a3ad3b5415bdc4

SHA256
1672f3dbee8c6d2b372f33468a592338c65ebde8fdfc5b7dbd34c40c9568b62e

SHA512
967a07b2b4775228c0cbb11ca87a8cff8ec7b6c5b164730c878df8a86d7ef9ecdf071c3a40d39ddbeeae8cf4c982f5187dcdf1f32b3e44689a5bc015c3ba5de4

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads