Overview

overview

10

Static

static

10

Cpu_thrott...80.apk

android-9-x86

6

Cpu_thrott...80.apk

android-10-x64

6

Cpu_thrott...80.apk

android-11-x64

6

Analysis

  • max time kernel
    7s
  • max time network
    154s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    11/01/2025, 18:35 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Cpu_throttling_test_apk_5533212680.apk

  • Size

    3.2MB

  • MD5

    8b87aeca37d6e8d0bb8519821c9b5a54

  • SHA1

    e387d9b01d1afd91c444501e7a50fd35298a2855

  • SHA256

    4b4385d36539e9ef42527488e73db5172dbcd4c2a0c394c7c8bc40e5a8b27093

  • SHA512

    8003821cae5820cd20d9ed2ec0f14a3df60662acaa96107070a029e565eb3abcf05b5f0ab5f9f0aa7d2db6f6bbb7063dfb879438e1353fbe62edb59365290bb7

  • SSDEEP

    49152:Va0SLdesVbIRgUQsI6Tvgf3YgizGp1s+vWJzcjgkyzfrFP:80Mdes9IRfQH/YBKp1sDJISzfrFP

Score
6/10
discovery

Malware Config

Signatures

Processes

  • com.example.tutnnknorz
    1⤵
      PID:4222

    Network

    • flag-us
      DNS
      semanticlocation-pa.googleapis.com
      Remote address:
      1.1.1.1:53
      Request
      semanticlocation-pa.googleapis.com
      IN A
      Response
      semanticlocation-pa.googleapis.com
      IN A
      142.250.180.10
      semanticlocation-pa.googleapis.com
      IN A
      216.58.201.106
      semanticlocation-pa.googleapis.com
      IN A
      142.250.179.234
      semanticlocation-pa.googleapis.com
      IN A
      172.217.169.10
      semanticlocation-pa.googleapis.com
      IN A
      216.58.213.10
      semanticlocation-pa.googleapis.com
      IN A
      142.250.200.42
      semanticlocation-pa.googleapis.com
      IN A
      172.217.16.234
      semanticlocation-pa.googleapis.com
      IN A
      142.250.187.234
      semanticlocation-pa.googleapis.com
      IN A
      216.58.212.202
      semanticlocation-pa.googleapis.com
      IN A
      216.58.204.74
      semanticlocation-pa.googleapis.com
      IN A
      172.217.169.74
      semanticlocation-pa.googleapis.com
      IN A
      216.58.212.234
      semanticlocation-pa.googleapis.com
      IN A
      172.217.169.42
      semanticlocation-pa.googleapis.com
      IN A
      142.250.200.10
      semanticlocation-pa.googleapis.com
      IN A
      142.250.178.10
      semanticlocation-pa.googleapis.com
      IN A
      142.250.187.202
    • flag-us
      DNS
      semanticlocation-pa.googleapis.com
      Remote address:
      1.1.1.1:53
      Request
      semanticlocation-pa.googleapis.com
      IN A
    • flag-us
      DNS
      s.grobrothers.org
      Remote address:
      1.1.1.1:53
      Request
      s.grobrothers.org
      IN A
      Response
      s.grobrothers.org
      IN A
      104.21.48.1
      s.grobrothers.org
      IN A
      104.21.16.1
      s.grobrothers.org
      IN A
      104.21.96.1
      s.grobrothers.org
      IN A
      104.21.80.1
      s.grobrothers.org
      IN A
      104.21.32.1
      s.grobrothers.org
      IN A
      104.21.112.1
      s.grobrothers.org
      IN A
      104.21.64.1
    • flag-us
      DNS
      s.grobrothers.org
      Remote address:
      1.1.1.1:53
      Request
      s.grobrothers.org
      IN A
    • flag-us
      DNS
      dabalx.org
      Remote address:
      1.1.1.1:53
      Request
      dabalx.org
      IN A
      Response
      dabalx.org
      IN A
      72.52.178.23
    • flag-us
      DNS
      dabalx.org
      Remote address:
      1.1.1.1:53
      Request
      dabalx.org
      IN A
      Response
      dabalx.org
      IN A
      72.52.178.23
    • flag-us
      DNS
      ww12.dabalx.org
      Remote address:
      1.1.1.1:53
      Request
      ww12.dabalx.org
      IN A
      Response
      ww12.dabalx.org
      IN CNAME
      084725.parkingcrew.net
      084725.parkingcrew.net
      IN A
      76.223.26.96
      084725.parkingcrew.net
      IN A
      13.248.148.254
    • flag-us
      GET
      http://ww12.dabalx.org/cankl2k.php?key=1icyhd8bc7bfqphjemaa&user_id=Cpu%20throttling%20test%20apk&usid=24&utid=10088944343
      Remote address:
      76.223.26.96:80
      Request
      GET /cankl2k.php?key=1icyhd8bc7bfqphjemaa&user_id=Cpu%20throttling%20test%20apk&usid=24&utid=10088944343 HTTP/1.1
      Host: ww12.dabalx.org
      Connection: keep-alive
      Upgrade-Insecure-Requests: 1
      User-Agent: Mozilla/5.0 (Linux; Android 9; AOSP on IA Emulator Build/PSR1.180720.122) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36
      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
      Accept-Encoding: gzip, deflate
      Accept-Language: en-US,en;q=0.9
      Response
      HTTP/1.1 200 OK
      Accept-Ch: viewport-width
      Accept-Ch: dpr
      Accept-Ch: device-memory
      Accept-Ch: rtt
      Accept-Ch: downlink
      Accept-Ch: ect
      Accept-Ch: ua
      Accept-Ch: ua-full-version
      Accept-Ch: ua-platform
      Accept-Ch: ua-platform-version
      Accept-Ch: ua-arch
      Accept-Ch: ua-model
      Accept-Ch: ua-mobile
      Accept-Ch-Lifetime: 30
      Content-Encoding: gzip
      Content-Type: text/html; charset=UTF-8
      Date: Sat, 11 Jan 2025 18:35:19 GMT
      Server: Caddy
      Server: nginx
      Vary: Accept-Encoding
      X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_gmg4fkuFZ/dUkd3VzP2Gs5hrcnwUNcnsB5yyUF+rOxdAvjZAsxJqiDlgKa+uFgeTjD9ACeJxK/QPpgfw9bjQcg==
      X-Buckets: bucket003
      X-Domain: dabalx.org
      X-Language: english
      X-Pcrew-Blocked-Reason: hosting network
      X-Pcrew-Ip-Organization: Cogent Communications
      X-Subdomain: ww12
      X-Template: tpl_MobileCleanBlack_twoclick
      Transfer-Encoding: chunked
    • flag-us
      GET
      http://ww12.dabalx.org/track.php?domain=dabalx.org&toggle=browserjs&uid=MTczNjYyMDUxOS44NjE6MWRhNjYzYzFiY2ZiMmE2YWQ1OGE1Nzk0MDZjZjNjNzc4NTNhZTIxM2Y2YTI5NDkxMzk3ZTVjYmZlNTEwNDhmMTo2NzgyYjllN2QyMzVi
      Remote address:
      76.223.26.96:80
      Request
      GET /track.php?domain=dabalx.org&toggle=browserjs&uid=MTczNjYyMDUxOS44NjE6MWRhNjYzYzFiY2ZiMmE2YWQ1OGE1Nzk0MDZjZjNjNzc4NTNhZTIxM2Y2YTI5NDkxMzk3ZTVjYmZlNTEwNDhmMTo2NzgyYjllN2QyMzVi HTTP/1.1
      Host: ww12.dabalx.org
      Connection: keep-alive
      User-Agent: Mozilla/5.0 (Linux; Android 9; AOSP on IA Emulator Build/PSR1.180720.122) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36
      Accept: */*
      Referer: http://ww12.dabalx.org/cankl2k.php?key=1icyhd8bc7bfqphjemaa&user_id=Cpu%20throttling%20test%20apk&usid=24&utid=10088944343
      Accept-Encoding: gzip, deflate
      Accept-Language: en-US,en;q=0.9
      Response
      HTTP/1.1 200 OK
      Accept-Ch: viewport-width
      Accept-Ch: dpr
      Accept-Ch: device-memory
      Accept-Ch: rtt
      Accept-Ch: downlink
      Accept-Ch: ect
      Accept-Ch: ua
      Accept-Ch: ua-full-version
      Accept-Ch: ua-platform
      Accept-Ch: ua-platform-version
      Accept-Ch: ua-arch
      Accept-Ch: ua-model
      Accept-Ch: ua-mobile
      Accept-Ch-Lifetime: 30
      Access-Control-Allow-Origin: *
      Content-Encoding: gzip
      Content-Type: text/html; charset=UTF-8
      Date: Sat, 11 Jan 2025 18:35:20 GMT
      Server: Caddy
      Server: nginx
      Vary: Accept-Encoding
      X-Custom-Track: browserjs
      Transfer-Encoding: chunked
    • flag-us
      GET
      http://ww12.dabalx.org/ls.php?t=6782b9e7&token=4948b4b55fa22eae7f0aef2cd343b69d62e9311a
      Remote address:
      76.223.26.96:80
      Request
      GET /ls.php?t=6782b9e7&token=4948b4b55fa22eae7f0aef2cd343b69d62e9311a HTTP/1.1
      Host: ww12.dabalx.org
      Connection: keep-alive
      User-Agent: Mozilla/5.0 (Linux; Android 9; AOSP on IA Emulator Build/PSR1.180720.122) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36
      Accept: */*
      Referer: http://ww12.dabalx.org/cankl2k.php?key=1icyhd8bc7bfqphjemaa&user_id=Cpu%20throttling%20test%20apk&usid=24&utid=10088944343
      Accept-Encoding: gzip, deflate
      Accept-Language: en-US,en;q=0.9
      Response
      HTTP/1.1 201 Created
      Accept-Ch: viewport-width
      Accept-Ch: dpr
      Accept-Ch: device-memory
      Accept-Ch: rtt
      Accept-Ch: downlink
      Accept-Ch: ect
      Accept-Ch: ua
      Accept-Ch: ua-full-version
      Accept-Ch: ua-platform
      Accept-Ch: ua-platform-version
      Accept-Ch: ua-arch
      Accept-Ch: ua-model
      Accept-Ch: ua-mobile
      Accept-Ch-Lifetime: 30
      Access-Control-Allow-Methods: POST, OPTIONS
      Access-Control-Allow-Origin:
      Access-Control-Max-Age: 86400
      Charset: utf-8
      Content-Type: text/javascript;charset=UTF-8
      Date: Sat, 11 Jan 2025 18:35:20 GMT
      Server: Caddy
      Server: nginx
      X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_hy78QhOQNI9HhbY5n8YV20LeHDJzHk+RiPpCKrqoP98vi2Tvtcz0YgCZT7RTMvt0KicrMZqQWjVFUHWbmyPQAg==
      X-Log-Success: 6782b9e8e34eccd66200fd02
      Transfer-Encoding: chunked
    • flag-us
      GET
      http://ww12.dabalx.org/favicon.ico
      Remote address:
      76.223.26.96:80
      Request
      GET /favicon.ico HTTP/1.1
      Host: ww12.dabalx.org
      Connection: keep-alive
      User-Agent: Mozilla/5.0 (Linux; Android 9; AOSP on IA Emulator Build/PSR1.180720.122) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36
      Accept: image/webp,image/apng,image/*,*/*;q=0.8
      Referer: http://ww12.dabalx.org/cankl2k.php?key=1icyhd8bc7bfqphjemaa&user_id=Cpu%20throttling%20test%20apk&usid=24&utid=10088944343
      Accept-Encoding: gzip, deflate
      Accept-Language: en-US,en;q=0.9
      Cookie: _cq_duid=1.1736620520.NQK4Yygn1Sn4O7K2; _cq_suid=1.1736620520.XumTC0kDwvQY29BP; __gsas=ID=8a0fe60001b72ec0:T=1736620521:RT=1736620521:S=ALNI_MZrW_KtKXdilvVHw0g80XlfPyplFw
      Response
      HTTP/1.1 200 OK
      Accept-Ranges: bytes
      Content-Length: 0
      Content-Type: image/x-icon
      Date: Sat, 11 Jan 2025 18:35:25 GMT
      Etag: "670f7248-0"
      Last-Modified: Wed, 16 Oct 2024 07:59:04 GMT
      Server: Caddy
      Server: nginx
    • flag-us
      DNS
      parking3.parklogic.com
      Remote address:
      1.1.1.1:53
      Request
      parking3.parklogic.com
      IN A
      Response
      parking3.parklogic.com
      IN A
      170.187.143.93
    • flag-us
      DNS
      euob.netgreencolumn.com
      Remote address:
      1.1.1.1:53
      Request
      euob.netgreencolumn.com
      IN A
      Response
      euob.netgreencolumn.com
      IN A
      143.204.176.13
      euob.netgreencolumn.com
      IN A
      143.204.176.84
      euob.netgreencolumn.com
      IN A
      143.204.176.80
      euob.netgreencolumn.com
      IN A
      143.204.176.38
    • flag-us
      DNS
      update.googleapis.com
      Remote address:
      1.1.1.1:53
      Request
      update.googleapis.com
      IN A
      Response
      update.googleapis.com
      IN A
      142.250.179.227
    • flag-us
      DNS
      crt.sectigo.com
      Remote address:
      1.1.1.1:53
      Request
      crt.sectigo.com
      IN A
      Response
      crt.sectigo.com
      IN CNAME
      crt.comodoca.com.cdn.cloudflare.net
      crt.comodoca.com.cdn.cloudflare.net
      IN A
      104.18.38.233
      crt.comodoca.com.cdn.cloudflare.net
      IN A
      172.64.149.23
    • flag-us
      GET
      http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
      Remote address:
      104.18.38.233:80
      Request
      GET /SectigoRSADomainValidationSecureServerCA.crt HTTP/1.1
      Host: crt.sectigo.com
      Connection: keep-alive
      User-Agent: Mozilla/5.0 (Linux; Android 9; AOSP on IA Emulator Build/PSR1.180720.122) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36
      Accept-Encoding: gzip, deflate
      Response
      HTTP/1.1 200 OK
      Date: Sat, 11 Jan 2025 18:35:20 GMT
      Content-Type: application/pkix-cert
      Content-Length: 1559
      Connection: keep-alive
      Last-Modified: Fri, 02 Nov 2018 00:00:00 GMT
      Etag: "33e4e80807204c2b6182a3a14b591acd25b5f0db"
      Cache-Control: max-age=86400,s-maxage=14400,public,no-transform,must-revalidate
      X-CCACDN-Proxy-ID: mcdpinlb3
      X-Frame-Options: SAMEORIGIN
      CF-Cache-Status: HIT
      Age: 13122
      Accept-Ranges: bytes
      Vary: Accept-Encoding
      Server: cloudflare
      CF-RAY: 9007018c3e7f7792-LHR
    • flag-us
      DNS
      d38psrni17bvxu.cloudfront.net
      Remote address:
      1.1.1.1:53
      Request
      d38psrni17bvxu.cloudfront.net
      IN A
      Response
      d38psrni17bvxu.cloudfront.net
      IN A
      99.86.249.105
      d38psrni17bvxu.cloudfront.net
      IN A
      99.86.249.97
      d38psrni17bvxu.cloudfront.net
      IN A
      99.86.249.190
      d38psrni17bvxu.cloudfront.net
      IN A
      99.86.249.202
    • flag-gb
      GET
      http://d38psrni17bvxu.cloudfront.net/themes/MobileCleanBlack_e01968e1/bg-inv.jpg
      Remote address:
      99.86.249.105:80
      Request
      GET /themes/MobileCleanBlack_e01968e1/bg-inv.jpg HTTP/1.1
      Host: d38psrni17bvxu.cloudfront.net
      Connection: keep-alive
      User-Agent: Mozilla/5.0 (Linux; Android 9; AOSP on IA Emulator Build/PSR1.180720.122) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36
      Accept: image/webp,image/apng,image/*,*/*;q=0.8
      Referer: http://ww12.dabalx.org/cankl2k.php?key=1icyhd8bc7bfqphjemaa&user_id=Cpu%20throttling%20test%20apk&usid=24&utid=10088944343
      Accept-Encoding: gzip, deflate
      Accept-Language: en-US,en;q=0.9
      Response
      HTTP/1.1 200 OK
      Content-Type: image/jpeg
      Content-Length: 50845
      Connection: keep-alive
      Server: nginx
      Date: Sat, 11 Jan 2025 11:12:23 GMT
      Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT
      Accept-Ranges: bytes
      ETag: "65fc1e7b-c69d"
      X-Cache: Hit from cloudfront
      Via: 1.1 9fdd5bd72604beaad36fa6d3b5b0ff10.cloudfront.net (CloudFront)
      X-Amz-Cf-Pop: LHR3-C2
      X-Amz-Cf-Id: mufbxJId2KT3rdkzxg-Prt_dnx1LY3hUl2Idy6YyQ6ZJ6h0DQNjO8g==
      Age: 26577
    • flag-us
      DNS
      www.google.com
      Remote address:
      1.1.1.1:53
      Request
      www.google.com
      IN A
      Response
      www.google.com
      IN A
      216.58.212.228
    • flag-us
      DNS
      syndicatedsearch.goog
      Remote address:
      1.1.1.1:53
      Request
      syndicatedsearch.goog
      IN A
      Response
      syndicatedsearch.goog
      IN A
      142.250.200.14
    • flag-us
      DNS
      obseu.netgreencolumn.com
      Remote address:
      1.1.1.1:53
      Request
      obseu.netgreencolumn.com
      IN A
    • flag-us
      DNS
      partner.googleadservices.com
      Remote address:
      1.1.1.1:53
      Request
      partner.googleadservices.com
      IN A
      Response
      partner.googleadservices.com
      IN A
      142.250.180.2
    • flag-us
      DNS
      obseu.netgreencolumn.com
      Remote address:
      1.1.1.1:53
      Request
      obseu.netgreencolumn.com
      IN A
      Response
      obseu.netgreencolumn.com
      IN A
      34.251.101.162
      obseu.netgreencolumn.com
      IN A
      54.75.69.192
      obseu.netgreencolumn.com
      IN A
      3.248.162.96
    • flag-us
      DNS
      www.godaddy.com
      Remote address:
      1.1.1.1:53
      Request
      www.godaddy.com
      IN A
      Response
      www.godaddy.com
      IN CNAME
      wildcard-ipv6.godaddy.com.edgekey.net
      wildcard-ipv6.godaddy.com.edgekey.net
      IN CNAME
      e6001.dscx.akamaiedge.net
      e6001.dscx.akamaiedge.net
      IN A
      2.19.168.53
    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
      Response
      android.apis.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      142.250.200.46
    • 72.52.178.23:443
      dabalx.org
      tls
      2.0kB
       4.2kB
       15
      15
    • 72.52.178.23:443
      dabalx.org
      tls
      890 B
       3.7kB
       11
      9
    • 72.52.178.23:443
      dabalx.org
      224 B
       112 B
       4
      2
    • 76.223.26.96:80
      http://ww12.dabalx.org/favicon.ico
      http
      3.2kB
       10.9kB
       17
      20

      HTTP Request

      GET http://ww12.dabalx.org/cankl2k.php?key=1icyhd8bc7bfqphjemaa&user_id=Cpu%20throttling%20test%20apk&usid=24&utid=10088944343

      HTTP Response

      200

      HTTP Request

      GET http://ww12.dabalx.org/track.php?domain=dabalx.org&toggle=browserjs&uid=MTczNjYyMDUxOS44NjE6MWRhNjYzYzFiY2ZiMmE2YWQ1OGE1Nzk0MDZjZjNjNzc4NTNhZTIxM2Y2YTI5NDkxMzk3ZTVjYmZlNTEwNDhmMTo2NzgyYjllN2QyMzVi

      HTTP Response

      200

      HTTP Request

      GET http://ww12.dabalx.org/ls.php?t=6782b9e7&token=4948b4b55fa22eae7f0aef2cd343b69d62e9311a

      HTTP Response

      201

      HTTP Request

      GET http://ww12.dabalx.org/favicon.ico

      HTTP Response

      200
    • 170.187.143.93:443
      parking3.parklogic.com
      tls
      1.3kB
       5.3kB
       10
      11
    • 143.204.176.13:443
      euob.netgreencolumn.com
      tls
      2.1kB
       47.7kB
       26
      41
    • 142.250.179.227:443
      update.googleapis.com
      tls
      1.7kB
       6.3kB
       8
      11
    • 104.18.38.233:80
      http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
      http
      525 B
       2.3kB
       4
      4

      HTTP Request

      GET http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

      HTTP Response

      200
    • 170.187.143.93:443
      parking3.parklogic.com
      tls
      1.5kB
       3.0kB
       11
      11
    • 99.86.249.105:80
      http://d38psrni17bvxu.cloudfront.net/themes/MobileCleanBlack_e01968e1/bg-inv.jpg
      http
      1.8kB
       53.4kB
       25
      40

      HTTP Request

      GET http://d38psrni17bvxu.cloudfront.net/themes/MobileCleanBlack_e01968e1/bg-inv.jpg

      HTTP Response

      200
    • 216.58.212.228:443
      www.google.com
      tls
      12.6kB
       118.9kB
       74
      114
    • 142.250.200.14:443
      syndicatedsearch.goog
      tls
      5.0kB
       9.1kB
       21
      20
    • 142.250.180.2:443
      partner.googleadservices.com
      404 B
       112 B
       7
      2
    • 142.250.180.2:443
      partner.googleadservices.com
      tls
      1.6kB
       6.2kB
       12
      15
    • 34.251.101.162:443
      obseu.netgreencolumn.com
      tls
      38.2kB
       9.4kB
       69
      50
    • 142.250.200.46:443
      tls, https
      858 B
       40 B
       1
      1
    • 142.250.200.46:443
      android.apis.google.com
      tls
      6.1kB
       8.5kB
       17
      20
    • 216.58.201.106:443
      semanticlocation-pa.googleapis.com
      tls, https
      1.2kB
       40 B
       1
      1
    • 224.0.0.251:5353
      3.8kB
       12
    • 1.1.1.1:53
      semanticlocation-pa.googleapis.com
      dns
      160 B
       336 B
       2
      1

      DNS Request

      semanticlocation-pa.googleapis.com

      DNS Request

      semanticlocation-pa.googleapis.com

      DNS Response

      142.250.180.10
      216.58.201.106
      142.250.179.234
      172.217.169.10
      216.58.213.10
      142.250.200.42
      172.217.16.234
      142.250.187.234
      216.58.212.202
      216.58.204.74
      172.217.169.74
      216.58.212.234
      172.217.169.42
      142.250.200.10
      142.250.178.10
      142.250.187.202

    • 1.1.1.1:53
      s.grobrothers.org
      dns
      126 B
       175 B
       2
      1

      DNS Request

      s.grobrothers.org

      DNS Request

      s.grobrothers.org

      DNS Response

      104.21.48.1
      104.21.16.1
      104.21.96.1
      104.21.80.1
      104.21.32.1
      104.21.112.1
      104.21.64.1

    • 1.1.1.1:53
      dabalx.org
      dns
      56 B
       72 B
       1
      1

      DNS Request

      dabalx.org

      DNS Response

      72.52.178.23

    • 1.1.1.1:53
      dabalx.org
      dns
      56 B
       72 B
       1
      1

      DNS Request

      dabalx.org

      DNS Response

      72.52.178.23

    • 1.1.1.1:53
      ww12.dabalx.org
      dns
      61 B
       129 B
       1
      1

      DNS Request

      ww12.dabalx.org

      DNS Response

      76.223.26.96
      13.248.148.254

    • 1.1.1.1:53
      parking3.parklogic.com
      dns
      68 B
       84 B
       1
      1

      DNS Request

      parking3.parklogic.com

      DNS Response

      170.187.143.93

    • 1.1.1.1:53
      euob.netgreencolumn.com
      dns
      69 B
       133 B
       1
      1

      DNS Request

      euob.netgreencolumn.com

      DNS Response

      143.204.176.13
      143.204.176.84
      143.204.176.80
      143.204.176.38

    • 1.1.1.1:53
      update.googleapis.com
      dns
      67 B
       83 B
       1
      1

      DNS Request

      update.googleapis.com

      DNS Response

      142.250.179.227

    • 1.1.1.1:53
      crt.sectigo.com
      dns
      61 B
       142 B
       1
      1

      DNS Request

      crt.sectigo.com

      DNS Response

      104.18.38.233
      172.64.149.23

    • 1.1.1.1:53
      d38psrni17bvxu.cloudfront.net
      dns
      75 B
       139 B
       1
      1

      DNS Request

      d38psrni17bvxu.cloudfront.net

      DNS Response

      99.86.249.105
      99.86.249.97
      99.86.249.190
      99.86.249.202

    • 1.1.1.1:53
      www.google.com
      dns
      60 B
       76 B
       1
      1

      DNS Request

      www.google.com

      DNS Response

      216.58.212.228

    • 1.1.1.1:53
      syndicatedsearch.goog
      dns
      67 B
       83 B
       1
      1

      DNS Request

      syndicatedsearch.goog

      DNS Response

      142.250.200.14

    • 1.1.1.1:53
      obseu.netgreencolumn.com
      dns
      70 B
       1

      DNS Request

      obseu.netgreencolumn.com

    • 1.1.1.1:53
      partner.googleadservices.com
      dns
      74 B
       90 B
       1
      1

      DNS Request

      partner.googleadservices.com

      DNS Response

      142.250.180.2

    • 1.1.1.1:53
      obseu.netgreencolumn.com
      dns
      70 B
       118 B
       1
      1

      DNS Request

      obseu.netgreencolumn.com

      DNS Response

      34.251.101.162
      54.75.69.192
      3.248.162.96

    • 1.1.1.1:53
      www.godaddy.com
      dns
      61 B
       164 B
       1
      1

      DNS Request

      www.godaddy.com

      DNS Response

      2.19.168.53

    • 1.1.1.1:53
      android.apis.google.com
      dns
      69 B
       109 B
       1
      1

      DNS Request

      android.apis.google.com

      DNS Response

      142.250.200.46

    MITRE ATT&CK Mobile v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.