4c6183029dcf2e4d604c473c2dfb4f72037b6a8f13d9183b0842fd201e422d7a

Resubmissions

27/03/2025, 07:43

250327-jj8nwa1mv2 6

27/03/2025, 07:39

250327-jgx5csyxcv 10

27/03/2025, 07:34

250327-jd367s1lw9 6

Analysis

max time kernel
121s
max time network
125s
platform
android-13_x64
resource
android-33-x64-arm64-20240910-en
resource tags

arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
submitted
27/03/2025, 07:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ttGPQI.html
Size

7KB
MD5

aa5d13590623abb5d3963a8af5dfb85d
SHA1

8dcb62e75f970ac4f9f78e2558f335951b599774
SHA256

4c6183029dcf2e4d604c473c2dfb4f72037b6a8f13d9183b0842fd201e422d7a
SHA512

94899bfebc29d4d76c1a8d0e9b787ae50386a5e8718194791d27d86eb7e67e1b0e1a9b0a4e68031905c767419bd767b9d2666ac5ffd0a8dd87c0bf842ac7282b
SSDEEP

96:CMq9SlLh2B3Zq36uWl/PtxyjttJQ8Maoah3vL5LaNclmnU1Eh2sS:T1lLhwJrPahtJxMaoah3vG12sS

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 1 IoCs

Web Service

T1102

flow	ioc
46	api.gofile.io

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4462

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Download/.pending-1743665676-ROPanel-FF-v4.apk

Filesize
21.5MB

MD5
52add477bac7cc0bcfea1d21bc9ba5a0

SHA1
be07a3d5915435f3b722a2b5ce2609cfe33888d0

SHA256
97de97bf9a691336357dbf08e49f63d320cc199cf1ecf5b658a8de7d7a2a8d40

SHA512
fdaf6ccd871e6e7e6b71da62d25b8185a18aaef60711d7b85408e8a5706fd23a29b816600c26b3d9a86e16c81e9e79c00b3ff7dcc3375138427191f871f6e055

Download Submit
/storage/emulated/0/Download/.pending-1743665676-ROPanel-FF-v4.apk

Filesize
37.4MB

MD5
25126a8bba7740c12a02d5965a832db6

SHA1
2168de9612b00cbccc9eb0f4f92f3ec1344ac611

SHA256
05658527313b2c7f31bf9fb030a5e61f41d195d8bcaab034c062ab6f1467a8c3

SHA512
038ecbf293176f8a07cb6a278a7d3569a66b9b7efd2e3ddff96f5a1a8730012efc45c1e0681ced5d2e07b866a309f9d35e59403a388ffcf071602a2f1aec94c5

Download Submit
/storage/emulated/0/Download/.pending-1743665676-ROPanel-FF-v4.apk (deleted)

Filesize
636KB

MD5
e66d9d17a63d80136903dc2ef3c3ce35

SHA1
5ea363b465fe731f8b1fbf494b14a9f82e8351ca

SHA256
84efebb2dd56046fe163fa65a6567115b8b2351e9cf9992a9790c443b8062e92

SHA512
24164ea0e237af9ca12c9f894396f70246508eb5f0e318e3aa15903e1161ec323b799eb38709e7e2c6e2ca9a400fe0dc992764f4cdb553e71baaef0b5be87e23

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads