Overview
overview
6Static
static
1URLScan
urlscan
1http://whatismyipadd...
windows7-x64
6http://whatismyipadd...
windows10-1703-x64
6http://whatismyipadd...
windows10-2004-x64
6http://whatismyipadd...
windows11-21h2-x64
6http://whatismyipadd...
android-10-x64
6http://whatismyipadd...
android-11-x64
6http://whatismyipadd...
android-13-x64
6http://whatismyipadd...
android-9-x86
6http://whatismyipadd...
macos-10.15-amd64
6http://whatismyipadd...
ubuntu-18.04-amd64
3http://whatismyipadd...
ubuntu-20.04-amd64
6http://whatismyipadd...
ubuntu-22.04-amd64
3http://whatismyipadd...
ubuntu-24.04-amd64
6Analysis
-
max time kernel
66s -
max time network
74s -
platform
android_x64 -
resource
android-33-x64-arm64-20240624-en -
resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system -
submitted
15/07/2024, 06:46
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://whatismyipaddress.com
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
http://whatismyipaddress.com
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
http://whatismyipaddress.com
Resource
win10v2004-20240709-en
Behavioral task
behavioral4
Sample
http://whatismyipaddress.com
Resource
win11-20240709-en
Behavioral task
behavioral5
Sample
http://whatismyipaddress.com
Resource
android-x64-20240624-en
Behavioral task
behavioral6
Sample
http://whatismyipaddress.com
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral7
Sample
http://whatismyipaddress.com
Resource
android-33-x64-arm64-20240624-en
Behavioral task
behavioral8
Sample
http://whatismyipaddress.com
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral9
Sample
http://whatismyipaddress.com
Resource
macos-20240711.1-en
Behavioral task
behavioral10
Sample
http://whatismyipaddress.com
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral11
Sample
http://whatismyipaddress.com
Resource
ubuntu2004-amd64-20240611-en
Behavioral task
behavioral12
Sample
http://whatismyipaddress.com
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral13
Sample
http://whatismyipaddress.com
Resource
ubuntu2404-amd64-20240523-en
General
-
Target
http://whatismyipaddress.com
Malware Config
Signatures
-
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 12 whatismyipaddress.com 21 whatismyipaddress.com -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.android.chrome -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.android.chrome
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
306KB
MD50d2e4ee68098c4162ff680d4dca70fbc
SHA1df0a280df91521cca323302276eece90cb2d9225
SHA256c44e39cb1646a0cf79b00e239e2154abd8ed4e2623238286012079884ec81079
SHA512c329f9d7b013d54f79fdf016e7b248857886f268fc4699917c1ca52d88cbd32b91fc5c315fc51dfcdb5f416bc267b1a801ffcf7498e7fe738e2c86ec7dc43419