hxxp://bit[.]ly/4fhvnBW

Analysis

max time kernel
842s
max time network
796s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
25/08/2026, 09:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://bit.ly/4fhvnBW
Sample260825-lzrfmsgp7t

Score

6^/10

discovery

Malware Config

Signatures

Looks up external IP address via web service 1 TTPs 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
54	api.ipify.org
57	api.ipify.org

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4427

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 49KB
SHA256 5ad38d0c689d0e990435e523a812ee2e273a8a4ff17ed416036179d0f5d95315
MD5 bf0df8d01764a5a6945a9b5c2fe2006e
SHA1 7cb135f92ab6e53073d181c7251f8e0d30968ebb
SHA512 ea5359037ab73e61aa0fd9d1c1eef4c9d8d1c30dda179a546c433c65d11b0008ec5f161e444a4e72c86adea297321359650bfb6bf71b72c8f964734ef22659fe
SSDEEP 1536:9j+k7u2oHHHHH9HuAxGDTBxWEJgQcoQNeNjG796QhHpzn:9nAxGDbDJ6NeNjGR6QhHpr
TLSH
T1BE339770D2846A37412F54C4D230EB9D76D7832ECB631906AFFC57AA6BDBCB0CA11199
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads