Overview

overview

10

Static

static

10

3d4f63fc88...6d.apk

android-9-x86

7

3d4f63fc88...6d.apk

android-10-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    06-03-2024 07:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3d4f63fc88ec8a4dfc9a5c3fee1a59ded40bbb2f4f04ed937c135b144e8a166d.apk

  • Size

    4.4MB

  • MD5

    5d082ee96d47c95b57141c58c1101556

  • SHA1

    0933eb400c15bdbbc075dbfb447cc81c2308e035

  • SHA256

    3d4f63fc88ec8a4dfc9a5c3fee1a59ded40bbb2f4f04ed937c135b144e8a166d

  • SHA512

    8577dad81c288504f202a399a8656bd641640cb7c2fe53fbc0fa383d8808bbf322393267a0e6ea54ede5e4c11f9d37fccfb647fbdca5cba5f920dce9bbeaa5bc

  • SSDEEP

    98304:JaG20AJgNs1g1j1sv4dDv23eAbwdclxBfefdyoMOzfr9+fh:UG29gN9UydSccxB2fdy3Fh

Score
8/10
collectionevasionstealthtrojan

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 2 TTPs 3 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasion
  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
    stealthtrojanevasion
  • Acquires the wake lock 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.snaperfect.inframe1
    1⤵
    • Makes use of the framework's Accessibility service
    • Removes its main activity from the application launcher
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5046

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads