hxxps://0x00sec[.]org/t/how-to-rob-a-casino/40556

Analysis

max time kernel
311s
max time network
326s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
22-05-2024 05:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://0x00sec.org/t/how-to-rob-a-casino/40556

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/cpuinfo com.android.chrome
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/meminfo com.android.chrome

description	ioc	process
File opened for read	/proc/cpuinfo	com.android.chrome

description	ioc	process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4162

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html
Filesize
434KB

MD5
b20eeb0b798014a79ab1ffb440f3cb30

SHA1
312529573d5ced5b97d44fb1ef68837e49c23642

SHA256
9ae81ee969617cbc450ec4eac4637790dd8269a3d384c13988cef6e52db87ac9

SHA512
020a2ebb6477e2049b2ef542c2c7dc69489988090f4220de5d0b7441846a4466931e73b1a1a6776903ea0b76f9f7961285aedca2c6ffef4a7fee8370c30a27b5

Download Submit