hxxp://Ipinfo[.]io

Analysis

max time kernel
115s
max time network
303s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
12-08-2024 10:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://Ipinfo.io

Score

6^/10

Malware Config

Signatures

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
2	ipinfo.io

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4176

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
315B

MD5
f53ccc8494ce8c0ad0e1488d91f7824d

SHA1
68605ab91124649857791c8ba24d8ed8ffa18591

SHA256
aa6871c3b3e763bb1d1eff5df581cc819383c0a0ad3edf1462403a4c258445aa

SHA512
0588fbb2a8fbc164e06a90f84d8fb39dd99d7e562a9b143382aaa5bf0b9dee7c7fa7b99e8d94b33c5a1cde6269caf5a3da51af1051147c07e102854f4c2917d8

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads