hxxp://balfour[.]com

Analysis

max time kernel
178s
max time network
190s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
02/06/2024, 13:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://balfour.com

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4358

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
17KB

MD5
1f5716b87be7a599cd5b57a6b59ecf22

SHA1
b8c3ddc02c180fad89c9cddf08fac73e17e3fbdd

SHA256
032ac02e9b6d85f49eac4b0d15382ffc6651bd84859e628e6f5ba738a91f75ca

SHA512
86ec5162d87adecc1cc9e079df52517545c4aed80d3ff64698d99b49b30b2dbe34a583f95016e4a00600b42518443c62b839c1fe6c371fd0ac343f0cba2589b6

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads