hxxp://6[.]177[.]191[.]248

Resubmissions

07/05/2026, 15:56

260507-tdmvbsfw7s6

07/05/2026, 15:55

07/05/2026, 15:47

07/05/2026, 15:43

07/05/2026, 15:35

07/05/2026, 15:32

Analysis

user interaction
yes
max time kernel
372s
max time network
406s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
07/05/2026, 15:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://6.177.191.248
Sample260507-s8ea1abs9l

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 1 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
69	raw.githubusercontent.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4185

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 260KB
SHA256 3363edf41dc36e0770088bccd13f945c44d56ec9afd179d29a1af5353386edfb
MD5 1bd67e664d796221850de76df99c21bd
SHA1 586bd780d382987a65b3bbde9a4a46f53c452d39
SHA512 976ca28d3961ff23a341bb1be65313118af96621b1e9fa725e6d3a75add3bff8776f06716cf5ef8b74c9cd65312779c20c898779960012fd45e20f8c60caea93
SSDEEP 6144:Xf8QdKqyUkIbGwz/gZI8xqdnTejUZsgm7MWxWX8f6N9WwqFeJ5PTQYbeHxHA7op0:XEQdKqyUkIbGwz/gZI8xqdnTejUZsgmU
TLSH
T1AC44B670B178617D021B26CAF270A718D39BE31BEA8855E5B67F92F487D3CD4EA43058
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 749166.crdownload

Path /storage/emulated/0/Download/Unconfirmed 749166.crdownload
Size 4.0MB
SHA256 b47bcc55ca8dc0625a145d6809cfa3ad78e9e3b4f33bc608b5bcaf7e9e1e5827
MD5 42585ccd2b7867c12052653e4d54b7cc
SHA1 a9348c3aabcc0171d1e35edeb37fd2da0fff0ad4
SHA512 e270bd1fbbaaccf3382048e9ac2489444a735ed32fb83f7681526a1edb0b7847d6adb8d75064b065309293ef75c45e2ea85fb132a1c12afd08b3a1346caad550
SSDEEP 98304:1kDC5i3mO2jB5qJYNXV6lDysPmkMZHG9dqO/J:1x2ZW5eYN4lDy2xwHG9dfJ
TLSH
T19B162341E765E94AE8F658738205C979A2304F50032BBBA6375D322C2BFFB801F45AD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads