hxxp://texaswhitetailfever[.] com

Analysis

max time kernel
125s
max time network
150s
platform
android_x86
resource
android-x86-arm-20240506-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
submitted
12-05-2024 22:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://texaswhitetailfever. com

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/cpuinfo com.android.chrome
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/meminfo com.android.chrome

description	ioc	process
File opened for read	/proc/cpuinfo	com.android.chrome

description	ioc	process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4114

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
133KB

MD5
d14b2622a42d66577c46319b2f73c16e

SHA1
2aa578dc85a26fcd18101fcfdb136025ea141b72

SHA256
b5648bddf72e6c45d27d9fda0d831be28cb407e66727beae0f7f146274cd4c03

SHA512
93ab9973db212d7c1bb2cdf1ef75074032809cf51ae550ea8665c76f48eab58f9ba01dbbe8cf4b4f923c806030915ed48e8c4cf25b92ae96f25b5895116455d7

Download Submit