hxxp://www[.]propbox[.]com-l-spri[.]xzxvhqokpr2k0pbexvj72m10wc3w7yotzs63oclgfysomg6l7[.]city-hy[.]traulic[.]org/QS7wQ1x0r4uBTB6jG_NXICf2ZjXyUl8B/1i44F6jukhp1rHaS1B1-Xg1f2lQXYeWQ

Analysis

max time kernel
117s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
24-05-2024 04:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://www.propbox.com-l-spri.xzxvhqokpr2k0pbexvj72m10wc3w7yotzs63oclgfysomg6l7.city-hy.traulic.org/QS7wQ1x0r4uBTB6jG_NXICf2ZjXyUl8B/1i44F6jukhp1rHaS1B1-Xg1f2lQXYeWQ

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/cpuinfo com.android.chrome
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/meminfo com.android.chrome

description	ioc	process
File opened for read	/proc/cpuinfo	com.android.chrome

description	ioc	process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4210

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
44KB

MD5
9f7d7c5163a7f19b4d6ee12746740f7e

SHA1
062bcf084765e655a25e1e1353e7c29e453342cb

SHA256
3f6e05b44233cb2a62f7f611dca2253257a980adede47b1655d1393a8e35ba46

SHA512
6c977283d61ad3a181832d111a187e8a5f37b35c14693be09cd9edbc7ee1b8c7ecf2f2cd8c23b74462a7eee382bca1196080baae0869d24093d7bc0605c35ccd

Download Submit