Analysis
- max time kernel
19s - max time network
22s - platform
android-14_x64 - resource
android-34-x64-arm64-20260325.1-en - resource tags
arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system - submitted
20/07/2026, 06:37
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://qantasrewers.top/poins
Resource
android-33-x64-arm64-20260708-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
http://qantasrewers.top/poins
Resource
android-34-x64-arm64-20260325.1-en
3 signatures
300 seconds
Behavioral task
behavioral3
Sample
http://qantasrewers.top/poins
Resource
android-35-x64-arm64-20260325-en
3 signatures
300 seconds
Errors
Reason
exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"I0720 06:37:51.848244 3012895 opengles.cpp:285] android_startOpenglesRenderer: gpu info\\nI0720 06:37:51.848282 3012895 opengles.cpp:286] \\nWARNING: could not open libX11.so, try libX11.so.6\\nWARNING: cannnot unmap ptr 0x727a2ec01000 as it is in the protected range from 0x7279aec00000 to 0x727a2ee00000\\n\",\"error\":\"signal: segmentation fault\",\"time\":\"2026-07-20T06:38:16Z\",\"message\":\"Emulator process unexpectedly exited\"}"
General
- Target http://qantasrewers.top/poins
- Sample260720-hdvpdsbx2s
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 27 ipinfo.io 52 ipinfo.io - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.android.chrome - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.android.chrome