a9d1561ed0d23a5473d68069337e2f8e7862f7b72b74251eb63ccc883ba9459f

Analysis

max time kernel
2519125s
max time network
130s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
20-12-2023 11:19

Target

a9d1561ed0d23a5473d68069337e2f8e7862f7b72b74251eb63ccc883ba9459f.apk
Size

2.0MB
MD5

d57e1c11f915b874ef5c86cedb25abda
SHA1

22e943025f515a398b2f559c658a1a188d0d889f
SHA256

a9d1561ed0d23a5473d68069337e2f8e7862f7b72b74251eb63ccc883ba9459f
SHA512

2e8324559e46cb9f912eeb84b6e80a3838c71c4d045fd0a112aa3bea7fb8efdeb2ca03990a7189f5fec8d0a3f81fdaf2a98b8bce4edebc4afdc3813739bc8601
SSDEEP

24576:N6yYAMzfzW3yA2XMntKGYp1P9Iu24SjxK/2axX8g/+Hfr0OMQi84B+oBG1xz:wvZzLW12gKGS1wB7aig/+Hfr0HB+RX

Score

8^/10

banker

Makes use of the framework's Accessibility service 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.escobar.pablo
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	com.escobar.pablo

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.escobar.pablo

com.escobar.pablo
1⤵
- Makes use of the framework's Accessibility service
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:4989