hxxps://docs[.]google[.]com/presentation/d/e/2PACX-1vS8oVWyvL7U5gnb1rOEo1okRP5uBLd9cgB2UJ0RWr-c1SLWF5P41q9T1AzG8DKi5KELVSmdGzvyhVFh/pub?start=false&loop=false&delayms=3000

Analysis

max time kernel
313s
max time network
321s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
23-05-2024 01:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://docs.google.com/presentation/d/e/2PACX-1vS8oVWyvL7U5gnb1rOEo1okRP5uBLd9cgB2UJ0RWr-c1SLWF5P41q9T1AzG8DKi5KELVSmdGzvyhVFh/pub?start=false&loop=false&delayms=3000

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/cpuinfo com.android.chrome
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/meminfo com.android.chrome

description	ioc	process
File opened for read	/proc/cpuinfo	com.android.chrome

description	ioc	process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4342

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
99KB

MD5
1f9515bea6d66da4eeba78ae5d3517d2

SHA1
6a4a038db0e10ddd6c3a357ef514b31462bdf335

SHA256
da414ae7e42efa514ec919f90cd127e6e9a2e3adbe8797f72031e8d07b9c35e6

SHA512
2d3adb0947e0aab12157cf35779715d58877bc6d871efd37328049f504ac65548631ad1de8f51501619eb349d32e08a4f8f557202bbc5f5e6505879ab7456c4d

Download Submit