Overview
overview
7Static
static
1URLScan
urlscan
1http://api.ipify.org
android-10-x64
7http://api.ipify.org
android-11-x64
7http://api.ipify.org
android-9-x86
7http://api.ipify.org
debian-9-armhf
http://api.ipify.org
debian-9-mips
http://api.ipify.org
debian-9-mipsel
http://api.ipify.org
ubuntu-18.04-amd64
3Analysis
-
max time kernel
152s -
max time network
188s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
25/05/2024, 15:44
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://api.ipify.org
Resource
android-x64-20240514-en
Behavioral task
behavioral2
Sample
http://api.ipify.org
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral3
Sample
http://api.ipify.org
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
http://api.ipify.org
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral5
Sample
http://api.ipify.org
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral6
Sample
http://api.ipify.org
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral7
Sample
http://api.ipify.org
Resource
ubuntu1804-amd64-20240508-en
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.android.chrome -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.android.chrome -
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 21 api.ipify.org 25 api.ipify.org
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136B
MD5e41f3b809ed3801d83be35f3f3343e5a
SHA11e1e8d3c1e5586294c280f51ca30ace4283faacc
SHA256c56c9a79b8925f59c26479747f33a95b96b22463ce33458de9a47b004fc52b37
SHA51293051a312be2a44b95030ab74e52e2fa136ccb36353d267959074761394530edb3f52bf5d4998e7f839a843220467a68644bf9dab1f858b5350052e94b852b32