hxxp://192[.]168[.]2[.]1

Analysis

max time kernel
179s
max time network
186s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
24-05-2024 18:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://192.168.2.1

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/cpuinfo com.android.chrome
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/meminfo com.android.chrome

description	ioc	process
File opened for read	/proc/cpuinfo	com.android.chrome

description	ioc	process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4466

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
151KB

MD5
b53616011bc3d0b0ff8519a9696806bd

SHA1
1a4c7f42c32db17e7f27c640c8130979d4d8ae36

SHA256
e5578a2af2fa472b80dc40d75654d2ede0d4636852efef730df53a733e1bfded

SHA512
33916d65ffddae3f2f117c703ace3e5bb9d3001b5a5fde0434df56735924db4611d8f967559c059140bc1f9474b2d55f9ac6f40e9035cdc55af201cb4d223ac1

Download Submit