hxxp://www[.]propbox[.]com-l-spri[.]xzxvhqokpr2k0pbexvj72m10wc3w7yotzs63oclgfysomg6l7[.]city-hy[.]traulic[.]org/QS7wQ1x0r4uBTB6jG_NXICf2ZjXyUl8B/1i44F6jukhp1rHaS1B1-Xg1f2lQXYeWQ

Analysis

max time kernel
118s
max time network
131s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
24/05/2024, 04:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.propbox.com-l-spri.xzxvhqokpr2k0pbexvj72m10wc3w7yotzs63oclgfysomg6l7.city-hy.traulic.org/QS7wQ1x0r4uBTB6jG_NXICf2ZjXyUl8B/1i44F6jukhp1rHaS1B1-Xg1f2lQXYeWQ
Sample240524-e47vvsdc81

Score

7^/10

collection discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://media/external/images/media	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
- Reads the content of photos stored on the user's device.
PID:5051

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Data from Local System

T1533

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 268KB
SHA256 6994ed31d565b0af731f3afd64ad98ec7c8853d11e423f12795515dcbbb676f5
MD5 8cbc77390833b47377e90a258dc146a4
SHA1 de37ddc2b24f34b615ddd1417105c756749dc634
SHA512 065beb6a8dda5e3c06b52430a59d40d6283104003fb5762f96029e74a11d67c27e256233388253e89ded173c09c41edb625ee631bb7ca81b5af2b4950deb071d
SSDEEP 3072:fLlO1Btl6Asn/JXzcGQjBDodzi1TgI7zg5mt0+Wj/jIj4e:fLlOPtl6AslzcGQjBsI7z0Ij1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads