irata | f703f31f7b9ef95f820a724ebcee36377e2f4a42c92756b819bea6f34ec96cac | Triage

Sharing

General

Target

SicurezzaBanca.apk
Size

4.5MB
Sample

240319-rrve8aeh2t
MD5

6f2d962721f731fb53abeb53da0cabc2
SHA1

7c8326fbd112eaf7bbe9b3c1d62e8fc97e819806
SHA256

f703f31f7b9ef95f820a724ebcee36377e2f4a42c92756b819bea6f34ec96cac
SHA512

965db90f15303e6700c64a7d359ed8e18505c545703bc1d3aabc597afcf63967bf7fa5d70d46e4e1076715a9fb181dd76750bba0d6c449d5672c731de1f57dba
SSDEEP

98304:W9hinlhin6Vhinahinx1hin6hinshinUhinnQoHlrBH57lQUPMvm/:WbCzC6DC8CxjCcCyCKCntF1HZKUPy8

Score

10^/10

irata android collection evasion

Malware Config

Targets

- Target
  
  SicurezzaBanca.apk
- Size
  
  4.5MB
- MD5
  
  6f2d962721f731fb53abeb53da0cabc2
- SHA1
  
  7c8326fbd112eaf7bbe9b3c1d62e8fc97e819806
- SHA256
  
  f703f31f7b9ef95f820a724ebcee36377e2f4a42c92756b819bea6f34ec96cac
- SHA512
  
  965db90f15303e6700c64a7d359ed8e18505c545703bc1d3aabc597afcf63967bf7fa5d70d46e4e1076715a9fb181dd76750bba0d6c449d5672c731de1f57dba
- SSDEEP
  
  98304:W9hinlhin6Vhinahinx1hin6hinshinUhinnQoHlrBH57lQUPMvm/:WbCzC6DC8CxjCcCyCKCntF1HZKUPy8
Score

8^/10

collection evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection evasion
- Acquires the wake lock
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

Credential Access

Discovery

Lateral Movement

Collection

Screen Capture

Command and Control

Exfiltration

Impact

Input Injection

Tasks

static1

behavioral1

collectionevasion

behavioral2

collectionevasion

behavioral3

collectionevasion