Malware Analysis Report

2025-01-19 07:47

Sample ID 240611-yw9t2azejd
Target https://tria.ge/dashboard
Tags
score
1/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
1/10

Threat Level: No (potentially) malicious behavior was detected

The file https://tria.ge/dashboard was found to be: No (potentially) malicious behavior was detected.

Malicious Activity Summary


Checks CPU information

Checks memory information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-11 20:09

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-11 20:09

Reported

2024-06-11 20:13

Platform

android-33-x64-arm64-20240611.1-en

Max time kernel

169s

Max time network

177s

Command Line

com.android.chrome

Signatures

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.android.chrome

Network

Country Destination Domain Proto
GB 172.217.169.68:443 udp
GB 172.217.169.68:443 tcp
GB 142.250.179.228:443 tcp
N/A 224.0.0.251:5353 udp
GB 142.250.187.234:443 tcp
US 172.64.41.3:443 tcp
US 162.159.61.3:443 tcp
US 162.159.61.3:443 tcp
GB 142.250.180.10:443 udp
US 1.1.1.1:53 tria.ge udp
NL 154.61.71.12:443 tria.ge tcp
NL 154.61.71.12:443 tria.ge tcp
US 1.1.1.1:53 accounts.google.com udp
BE 74.125.206.84:443 accounts.google.com tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.200.36:443 www.google.com tcp
US 1.1.1.1:53 chrome.cloudflare-dns.com udp
US 1.1.1.1:53 chrome.cloudflare-dns.com udp
US 1.1.1.1:53 chrome.cloudflare-dns.com udp
US 162.159.61.3:443 chrome.cloudflare-dns.com tcp
US 162.159.61.3:443 chrome.cloudflare-dns.com tcp
US 172.64.41.3:443 chrome.cloudflare-dns.com tcp
US 1.1.1.1:53 content-autofill.googleapis.com udp
GB 142.250.200.42:443 content-autofill.googleapis.com tcp
US 162.159.61.3:443 chrome.cloudflare-dns.com udp
GB 142.250.187.228:443 udp
GB 142.250.200.46:443 udp
GB 142.250.200.33:443 www-birminghammail-co-uk.cdn.ampproject.org tcp
GB 142.250.200.33:443 tcp
GB 216.58.204.65:443 cdn.ampproject.org tcp
GB 216.58.204.65:443 tcp
GB 216.58.204.65:443 cdn-flipboard-com.cdn.ampproject.org tcp
GB 142.250.187.193:443 0-i2--prod-birminghammail-co-uk-0.cdn.ampproject.org tcp
GB 142.250.187.234:443 content-autofill.googleapis.com udp
GB 142.250.187.193:443 tcp
GB 216.58.204.65:443 udp
GB 142.250.200.33:443 udp
GB 216.58.204.65:443 udp
GB 172.217.169.68:443 udp
US 162.159.61.3:443 chrome.cloudflare-dns.com udp
GB 142.250.179.228:443 tcp
US 1.1.1.1:53 voilatile-pa.googleapis.com udp

Files

files/dom-0.html

MD5 9700317853e23cc9d0c8b11cb19bccdc
SHA1 7bbf61fa64bdba729c7992964ad43960e922d8ca
SHA256 db45749c334e15512332aeb2eb6780a61e2a2afe83ef15a5839e32db8f5c84a7
SHA512 d0b7183bf66fadc07fe23d685ae35f97f7ffd034ed84ab6137a8ff85c65b393e82d25d83998ecc16988701f2121edc644597708c76a77fff48f1ebd6b4e3b907

files/dom-1.html

MD5 cecb649cb1fb79c3736936fcbef3bbf2
SHA1 2c95183d7d2b0cd68d15b3c4115189351fc08720
SHA256 09bda72e7c32a69e3268e0ebd8caa33684cbc954dd00c7d93a38830e348ef324
SHA512 b8aca3cf0ea838093bd29b70ead608597260b0e35886d491d17c304878f99510fd885d96a191080acb5b706a642253bd9cbe5065ff234472b048fcce282061de