hxxp://Ipinfo[.]io

Analysis

max time kernel
115s
max time network
243s
platform
android_x86
resource
android-x86-arm-20240603-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
submitted
06/06/2024, 04:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://Ipinfo.io
Sample240606-esbchsgd91

Score

6^/10

Malware Config

Signatures

Looks up external IP address via web service 3 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
3	ipinfo.io
6	ipinfo.io
76	ipinfo.io

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4157

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 191KB
SHA256 1331cd66f5eaec679555a0cc4776db37653277f872354bb35b998f604899ca2a
MD5 84d43c3db7383edd68ad6e1702872cbc
SHA1 fd591bcd154a18c3a437f3d8065deea9b5fa9aea
SHA512 1a5f556c3767683877c9f564e4897c79e47812fb5261e35c5a2f718e4162622701ea6cec5ff8f1b46536470ebe233eb0fc43e0f2e4916e724c6c0daecd746bec
SSDEEP 3072:7sAJq3o7vN0rZCLErLNJcCl5OXoX/XkX+XmX8XgXkXqXIXBX0Xe2ACAihMU:7sN7ihp
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads