hxxps://www[.]paypal[.]com/ncp/payment/NWKMNP2X7ZD28

Analysis

max time kernel
124s
max time network
141s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
13/11/2024, 11:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.paypal.com/ncp/payment/NWKMNP2X7ZD28

Score

5^/10

paypal phishing

Malware Config

Signatures

Detected potential entity reuse from brand PAYPAL.
phishing paypal

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4293

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
129KB

MD5
51eb2acffdf57b8f4ae87f8f2cbe3cf6

SHA1
78fef90b65a979bda0775744865fbe09695230c8

SHA256
ce9b11ba14321f6f21b6039ab2ce25653cce953c744b961c2ca5b7a654a7395c

SHA512
5c00371046c3838ec2be0b6f6c812609d83ec17691421c08fdff63c7e542528d9e4e6c1dc64947d5f0f275f2eb8ad4ae4945699e891baa49c1e9e42493aba21a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads