hxxp://texaswhitetailfever[.] com

Analysis

max time kernel
126s
max time network
153s
platform
android_x64
resource
android-x64-arm64-20240506-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
submitted
12-05-2024 22:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://texaswhitetailfever. com

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/cpuinfo com.android.chrome
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/meminfo com.android.chrome

description	ioc	process
File opened for read	/proc/cpuinfo	com.android.chrome

description	ioc	process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4685

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html
Filesize
151KB

MD5
994cc6b8f009649bb3745d03c6e5437d

SHA1
eb7876a4886fbcdecfb6d8e363405483c3b3294e

SHA256
303884857e902ff83d0111f11de8cb11fd596aa023e720cb472cf9d09ed495ac

SHA512
87281d41150c547204630d30606c5b4ece020fd4a1f0e4ce54ca2e3e9e699186287c78f27602336e163719ead2e567bef7fea7a55de2018410f7a4830a36d993

Download Submit