hxxps://81d8469c-febc-4761-9304-fb60d97508c5-00-2stzpgyde6u38[.]spock[.]replit[.]dev/

General

Target

https://81d8469c-febc-4761-9304-fb60d97508c5-00-2stzpgyde6u38.spock.replit.dev/
Sample

240820-bwzbza1blq

Score

6^/10

android

Malware Config

Targets

- Target
  
  https://81d8469c-febc-4761-9304-fb60d97508c5-00-2stzpgyde6u38.spock.replit.dev/
Score

6^/10
- Declares services with permission to bind to the system
- Legitimate hosting services abused for malware hosting/C2
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Requests dangerous framework permissions
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

1

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1633

System Checks

2

T1633.001

Credential Access

Discovery

System Information Discovery

2

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Declares services with permission to bind to the system

Legitimate hosting services abused for malware hosting/C2

Looks up external IP address via web service

Requests dangerous framework permissions

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Tasks

static1

urlscan1

behavioral1