hxxps://sanernow[.]com/spcampaigns/unsubscribe/XReKS5UwG1asLinrPiWXzvD83IBbaTelkpaTvuyxM3I/ySZBi16T9H7dVa8vGf1xow/jbiBgqGx6H6o8920763QTu51pA

Analysis

max time kernel
311s
max time network
328s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
24-05-2024 01:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://sanernow.com/spcampaigns/unsubscribe/XReKS5UwG1asLinrPiWXzvD83IBbaTelkpaTvuyxM3I/ySZBi16T9H7dVa8vGf1xow/jbiBgqGx6H6o8920763QTu51pA

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/cpuinfo com.android.chrome
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/meminfo com.android.chrome

description	ioc	process
File opened for read	/proc/cpuinfo	com.android.chrome

description	ioc	process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4232

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html
Filesize
1KB

MD5
2662fdb1bed14d93dce390f83646e28d

SHA1
d17ad9d0383721d78ca18d49d1c1ed0544e02945

SHA256
15725d03a1f64eee71cea278ba19b8c1a24d139ddc2da7e57f74e9e61b3f1232

SHA512
cd848cb806c30b9e129961b52884246c8d8015e2e03ae2eb1aabed34cc827c6ebf7370aee1368f26dd17ef79ed35b6288c6ebd9f8a13d6cc4a440e308babb458

Download Submit