hxxps://61[.]233[.]109[.]208[.]host[.]secureserver[.]net/refracaiosngsf526vacxswas1a[.]php

Analysis

max time kernel
176s
max time network
168s
platform
android_x64
resource
android-33-x64-arm64-20240514-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240514-enlocale:en-usos:android-13-x64system
submitted
23-05-2024 05:24

Target

https://61.233.109.208.host.secureserver.net/refracaiosngsf526vacxswas1a.php

Score

7^/10

discovery evasion

Checks CPU information 2 TTPs 2 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.android.chromecom.android.chrome

description ioc process

File opened for read /proc/cpuinfo com.android.chrome
File opened for read /proc/cpuinfo com.android.chrome
Checks memory information 2 TTPs 2 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.android.chromecom.android.chrome

description ioc process

File opened for read /proc/meminfo com.android.chrome
File opened for read /proc/meminfo com.android.chrome

description	ioc	process
File opened for read	/proc/cpuinfo	com.android.chrome
File opened for read	/proc/cpuinfo	com.android.chrome

description	ioc	process
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4264

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4728