hxxps://9nyj3hptvpiwok[.]oss-cn-zhangjiakou[.]aliyuncs[.]com/b5fb2a839f823344ea982bf53a5d8568a/67n19n0b?response-content-disposition=attachment%3B%20filename%20%3D%20%2296719827%22&response-disposition-type=application%2Fvnd[.]android[.]package-archive&OSSAccessKeyId=LTAI5tKfpMBJbsoUnABtHD5K&Expires=1716151134&Signature=BUmUiG7Wdh15E7AWxp4b67fk6Cs%3D

Analysis

max time kernel
85s
max time network
81s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
20/05/2024, 16:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://9nyj3hptvpiwok.oss-cn-zhangjiakou.aliyuncs.com/b5fb2a839f823344ea982bf53a5d8568a/67n19n0b?response-content-disposition=attachment%3B%20filename%20%3D%20%2296719827%22&response-disposition-type=application%2Fvnd.android.package-archive&OSSAccessKeyId=LTAI5tKfpMBJbsoUnABtHD5K&Expires=1716151134&Signature=BUmUiG7Wdh15E7AWxp4b67fk6Cs%3D

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4508

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads