hxxps://81d8469c-febc-4761-9304-fb60d97508c5-00-2stzpgyde6u38[.]spock[.]replit[.]dev/

Analysis

max time kernel
2341s
max time network
2355s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
20/08/2024, 01:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://81d8469c-febc-4761-9304-fb60d97508c5-00-2stzpgyde6u38.spock.replit.dev/

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by chooser target services to bind with the system. Allows apps to modify targets that handle user actions.	android.permission.BIND_CHOOSER_TARGET_SERVICE

Legitimate hosting services abused for malware hosting/C2 1 TTPs 10 IoCs

Web Service

T1102

flow	ioc
435	discord.com
416	discord.com
424	discord.com
432	discord.com
434	discord.com
441	discord.com
442	discord.com
443	discord.com
734	raw.githubusercontent.com
413	discord.com

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
483	ipinfo.io

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Checks CPU information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 3 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4327

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:12019

com.android.chrome
1⤵
- Checks memory information
PID:13175

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
1KB

MD5
bbbe2fef7293905a163a0d5f031f87b9

SHA1
d3e7061df6aeba742a75910c1468c7a2a50a95c3

SHA256
abbf70e180fdf95c4c551f4d2192335812818bb7d593af7636cf1de73bbca3a2

SHA512
662d5946569586270f6f6500c3cca6b62345730aca47cfc98d31566d7d4f28f340e1826d4597d5eafc34de0dedc07e49aba11d740e4f0c1065c1bcf9d9d96584

Download Submit
files/dom-1.html

Filesize
352KB

MD5
d98f6c54ebb2c8f43900e380a426f748

SHA1
18e3c5e76fc741ac6bc40d0502c6a2dc95635f29

SHA256
0f107ed0930e8b81e81bd2e361e600866a119e6e6c8718d12ab9f39a9b1ce71d

SHA512
a6270b0e286a547002a08706db8916199bb6c9f566c0d5339d351377337d38c5123129d745b913b54ce4f3cd0a741223f27ae9a3062fd4ca2ee662dcc2c77f10

Download Submit
/storage/emulated/0/Download/.pending-1724722300-Bluecord_2.3.apk

Filesize
64KB

MD5
ee745f4cdd72dd5bf60e349e2907a842

SHA1
1059262acde719eb50aa1958ae48a6b7e8a25325

SHA256
739fbcf7117eddc2dcd895d39ff761f10fd17cf169ac85c4dd55d3c7e448bd2e

SHA512
ce5d03b9efd3ad337dac61be2cc6348be5199a31822a4f2d529162f9c7d21ccbba092c1f85093c107a770e333b8acc583b2797d68623647213937c050234bf9e

Download Submit
/storage/emulated/0/Download/.pending-1724722300-Bluecord_2.3.apk (deleted)

Filesize
544KB

MD5
648a0713850baf0d72f1407ab14822d2

SHA1
86b8e35f2fda507f70abdd1b7dbcde3de7c3bada

SHA256
966f70a511f01bd38622d4586b7f0c2b9a46d8f40725aa2381f6a1ab5b539b4f

SHA512
f3cd2aebce5405831949d82e01c303046d3c36eb164cd4454082c80e94b7de0178a455852b9e5d6535f704f21f7e51b8322f2e4c791e3a7a5038d30a8420306c

Download Submit
/storage/emulated/0/Download/.pending-1724722328-Bluecord_2.3.apk

Filesize
1.6MB

MD5
ca56c5bd8f10b212a1b2220e40287d0a

SHA1
69036b95344d8cf00d1eb9d6633d4f96001bf884

SHA256
5144b85f8e1cdd64dd7390ec120a5537426a8eae26968b927c8a4d9b97894f85

SHA512
3e0fa77eabfa0e683f62244879c283555451e861f0f95d7d3d5f66c965753aac5c7fa0797f780ac411531956b81dedd4fec4cdbd200ee6f588fcfcff4b0b2ce7

Download Submit
/storage/emulated/0/Download/.pending-1724722328-Bluecord_2.3.apk

Filesize
1.6MB

MD5
bd9f2cede336d99881d23342f672d7a1

SHA1
b1baeef62fde44220bd8db91d0eb26c19cfd4d29

SHA256
0def688bb37f97941f54fd650eb07fa3f6b2e79e67d8a0973f59ee5a67ab1b8a

SHA512
013ed6549b5c34afd409b453e9cd6edb4bce27f07a16de8b58c69a7a02bf7cfd39cbc13035dc5766a925a368e0b1aa6497ef61195787961cac75370632e27207

Download Submit
/storage/emulated/0/Download/.pending-1724722328-Bluecord_2.3.apk

Filesize
114.0MB

MD5
0f143fa08924eae22930dca593acfa65

SHA1
1fa782781373138bd29db7e1ed50a20bd46f209e

SHA256
caf2031f7518291ffc30aeaf0a58ec42a3892c9ab7fb0bacb4fc85d094823f17

SHA512
ee3368064cb70d1eb2418701bf5e2f6ab03e47c1b457d9e39e7128b566bbb43a536e82f232eae588da1eb77f093c3b25e2a7328804958aa1b6f5b775b635836f

Download Submit
/storage/emulated/0/Download/.pending-1724722359-mt-manager-2-16-5.apk

Filesize
4.3MB

MD5
f0894bb14e4d45d2726d492dfb9f5370

SHA1
5659052f9a5a97b3f0fb834da7b1ac695bb39233

SHA256
8847fb650fd7f661b5735807efeafb9ddebec17c4ad3e6c199e497f83f5b890f

SHA512
c25be6d31b9153fe4b282619e2feb78523f99c89627213fde3823d3935a9d5b593fe4fc14de6c45fc7e110ea4f184f9b3eea6e23e5d5addea819dd5994b983f7

Download Submit
/storage/emulated/0/Download/.pending-1724722359-mt-manager-2-16-5.apk

Filesize
4.4MB

MD5
5f2da7e35c13555e7b470ead924f7731

SHA1
853a33520819e2fc23523528e63323c8ec3e503b

SHA256
c287322796d3a1e33b796948fb9c307d331ca5509a1e60c3277ce6f11c5141e7

SHA512
3df39139c696977a30655c0992382567564f086425716722c3180e51a21633c708d0c95b6922249a8ce9693d205a7d51e385faa3d17f95677668399f4c579432

Download Submit
/storage/emulated/0/Download/.pending-1724722359-mt-manager-2-16-5.apk

Filesize
19.2MB

MD5
2c40cd213106631d15c5a92c4ed42578

SHA1
244622b2959b8ab8365dae3c09069525c4966b8f

SHA256
022ae969b005bc7480a89ee8de4bde62d2a9256df9ada4672417d2a470545b2d

SHA512
48b716e720209faab54b436f58b7a6fdccae6c5662f4040b952104ad582339a2011fe8d324c918051ebf8493ab657c0ec72befef29a37e5e552a2eb0a4898fe9

Download Submit
/storage/emulated/0/Download/.pending-1724722359-mt-manager-2-16-5.apk (deleted)

Filesize
1.7MB

MD5
a6d00eb08901f3cc213f9d1df5d04b3e

SHA1
7c22b5bf4f39b4ded9bd459bce5bb1bae21522d7

SHA256
1dd6cd287343ac734d99ba204073ef3c47a4ddaf8420c276cba1a73b703c0aeb

SHA512
6dbe4bda652c5685136a04bbe04300498797f004202021c22c725be0a41124fd27164c34eeea701f909816d9b49263a28ab787d7b578e701d6d9962b9f44d8cb

Download Submit
/storage/emulated/0/Download/.pending-1724722367-Nice.rar (deleted)

Filesize
512KB

MD5
75197fa44ed27acb799693adfd63990a

SHA1
bb787a63f43e2a3866180535f1c506e24d80139b

SHA256
231f93c70e3e0551f64270bbc8edf3a9d766f67c702e896dd0db33b25b1d2891

SHA512
3365f011e6e3dd396fcefc2ed87f130d998518e07254fac3dab091c754d40abfa699cc94b136d2f395e93331b2d35cee8c88d23c8d35e0c54b9344a68b3e7d66

Download Submit
/storage/emulated/0/Download/.pending-1724722857-Nice.zip (deleted)

Filesize
512KB

MD5
b7edfc354de30001ad7ac77d883fc2ce

SHA1
9a758b062a3ea0a531cf6c808c063b24fa1a00b6

SHA256
0ca26f95f1946b89ec10995c1d728df031127c4fcaf2aba6202b1dd8b09a28d5

SHA512
59a0ed0f6ea61c48d405f4912d87183afd4bc8bf6e32bdec3cf9057286b0393129c89d31b957a5f08725351dbd6ec3a42fd86b59515b9bb542af7024150f419e

Download Submit
/storage/emulated/0/Download/.pending-1724723928-Elite.apk (deleted)

Filesize
1.0MB

MD5
194b038f6a60a1cd5c5907e5878ff189

SHA1
7505c2befcce4156c44b77144b546fbe21a26c3b

SHA256
d988730819819513874d0231546477f126d051e63f6246f4dd0a6423c33c96d1

SHA512
ed318f635d9557f24a094b6b6f899c5525a0c6d20b2a88f3eac57a399ae947bfefd9e39d2aec2cb93b43c1a2ef9ebdf614c89cd72332c0c6eeee599f0afb6c59

Download Submit
/storage/emulated/0/Download/.pending-1724724006-Hellboy.apk (deleted)

Filesize
855KB

MD5
cdedcb499e864a033d713a091990bb51

SHA1
81e5812c0269e73b8a1aa02d9067457d3f4774b1

SHA256
6eeea7c4352fc53a915e464bd897fb78cecd29feb1dfb552a3a1c2b152debc7d

SHA512
d5cbd444bf8d4006428317331ba99c55a49b7b40b7995ddc5b7d49e317f3cae5e626700dde028aaa0d576572ad77be87cbb260254feb027db4b3a9eb4a08772c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads