hxxp://www[.]propbox[.]com-l-spri[.]xzxvhqokpr2k0pbexvj72m10wc3w7yotzs63oclgfysomg6l7[.]city-hy[.]traulic[.]org/QS7wQ1x0r4uBTB6jG_NXICf2ZjXyUl8B/1i44F6jukhp1rHaS1B1-Xg1f2lQXYeWQ

Analysis

max time kernel
125s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
24-05-2024 04:30

Target

http://www.propbox.com-l-spri.xzxvhqokpr2k0pbexvj72m10wc3w7yotzs63oclgfysomg6l7.city-hy.traulic.org/QS7wQ1x0r4uBTB6jG_NXICf2ZjXyUl8B/1i44F6jukhp1rHaS1B1-Xg1f2lQXYeWQ

Score

7^/10

discovery evasion

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/cpuinfo com.android.chrome
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/meminfo com.android.chrome

description	ioc	process
File opened for read	/proc/cpuinfo	com.android.chrome

description	ioc	process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4335

files/dom-0.html
Filesize
268KB

MD5
d1b40d71c53f7053d1146ef57ea97c56

SHA1
1a0f5fab9d42ceedd3d49cd090e72d5ba97a1e67

SHA256
072fab84645940ab8146e2d3d1e9a623a98a4b00197d9c71767934fd0c97e125

SHA512
6a0165d97552adc7e75c51ddf4ec95c2f7d30e0d4d3dcd77e5973ebe585b78a0e312fa40c0d4dda17164a933100be9f26dfe653b0fb563da7a9928c23033c6c2

Download Submit