hxxps://github[.]com/Endermanch/MalwareDatabase

Resubmissions

24-04-2024 21:18

24-04-2024 20:42

24-04-2024 20:40

24-04-2024 20:37

max time kernel
1685s
max time network
1666s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
24-04-2024 21:18

Score

7^/10

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/cpuinfo com.android.chrome
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/meminfo com.android.chrome
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service
T1102

Processes:

flow ioc

44 camo.githubusercontent.com
45 camo.githubusercontent.com

description	ioc	process
File opened for read	/proc/cpuinfo	com.android.chrome

description	ioc	process
File opened for read	/proc/meminfo	com.android.chrome

flow	ioc
44	camo.githubusercontent.com
45	camo.githubusercontent.com

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4355

files/dom-0.html
Filesize
193KB

MD5
f959a2093204b46966189adf53b716a7

SHA1
08f0ee74e04ac232ad649e26ca4339799600dbc4

SHA256
b086f7e12aab7d72a6d3ac721b7374ceffc5ee3189a5050d8156f7f7f5942b38

SHA512
8cc30f127fe9c03e737f90dbc5cf1de454942e3935779d2b98349385095d5297d75690bab5e2cbde0a13474f66150cb101e3cd9512ec6bb215ea1beb369f4687

Download Submit