472feeabc60fdcc87345574586a7599ead1625c94bf75f373e9086b4a6cfedbe

Analysis

max time kernel
150s
max time network
158s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
20-03-2024 13:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

BNLSicuro.apk
Size

4.5MB
MD5

4637f70bb727b40f3d7e8be88da1f244
SHA1

4baaf217d259f90e9edf23e345551e6e875869a5
SHA256

472feeabc60fdcc87345574586a7599ead1625c94bf75f373e9086b4a6cfedbe
SHA512

971ae9b858ec5f14dec5538e1cb62d1987c534aae48e5b6d19a07bb68d1dfa1ac16963f7017d2f0ffd0f3ad45bd9a3ec2d85dd26aeef41032941733c35dd3a18
SSDEEP

98304:vEr5hinlhin6Vhinahinx1hin6hinshinUhinycfpNT4IWzDYCPw93Z0i:WCzC6DC8CxjCcCyCKCycj45ICPw9Oi

Score

8^/10

collection evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 2 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion

Input Injection

T1516

Screen Capture

T1513

Processes:

com.bnlsicurabnlapp.apk

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.bnlsicurabnlapp.apk
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.bnlsicurabnlapp.apk

Requests enabling of the accessibility settings. 1 IoCs

Processes:

com.bnlsicurabnlapp.apk

description	ioc	Process
Intent action	android.settings.ACCESSIBILITY_SETTINGS	com.bnlsicurabnlapp.apk

Acquires the wake lock 1 IoCs

Processes:

com.bnlsicurabnlapp.apk

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.bnlsicurabnlapp.apk

com.bnlsicurabnlapp.apk
1⤵
- Makes use of the framework's Accessibility service
- Requests enabling of the accessibility settings.
- Acquires the wake lock
PID:4257

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Discovery

Lateral Movement

Collection

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.bnlsicurabnlapp.apk/cache/1

Filesize
309B

MD5
cad0d927c3585c0e21688980f14315a6

SHA1
17c76f4c6fe4bc006c3d5b9e6a5d4a37d8db2041

SHA256
4e5ab1c0cb9c537b3b4f64f1e7477151971ae9d53df6ae0c4404c9a8f824f44c

SHA512
c42000b1e16bfa2d316fd626f4d7ceab1c985e7257ed68bb3bcfa68f7356bc6e4bd125b09b0952a189aa522234d6fc1c56feac5a842cc1f7b8ae3c278dda697e

Download Submit
/data/data/com.bnlsicurabnlapp.apk/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/data/com.bnlsicurabnlapp.apk/files/db.db

Filesize
40KB

MD5
0f846d61a922fcd3852c7241f99dc9bc

SHA1
2198433f3a500dcf88048096d0dbdb9f26b7ce47

SHA256
39ced8a590d3e71780b7d787db9b98065d9cd7a9f987dda085fb837a012cff8d

SHA512
d2380af9ad7c68ffdca1745f6dc3f747cc5ff5622ad1c6a1b1af79267c8d3d1f28fe6e01c435797a77309ec31ce085a3c6866503b01bc9850f679ffb34ea3c08

Download Submit
/data/data/com.bnlsicurabnlapp.apk/files/db.db

Filesize
4KB

MD5
32d50418eb9cc48b26054a251a525252

SHA1
312ecef70715199403f3064a023bc5096e91e7af

SHA256
997ea84efb161887ea79b89a23a421bf2be0b3eae61c3c0e273cc5be4c8482e4

SHA512
e5ebdf900167404a1e742db16df6323858139eda2ebf02cb7927941ab82167e3a44ec02022161ba517d4a8fc71bc54c0c4618cb9ae517763e9f3ab8e343bd41e

Download Submit
/data/data/com.bnlsicurabnlapp.apk/files/db.db-journal

Filesize
4KB

MD5
787d6005dbf5b7d700b4b8a00d5b5f6d

SHA1
2518df5676f0aa880e9b1648d287f8dc8cba9df4

SHA256
7045d9eea5d4da01395ba44819fae01aec519c9e97765357ea3de84a29053b37

SHA512
642862d8e965fb4795d23c2211feb05c1a41d6ad084f2372f0972bc993d3d083dad628b006082d8573761cd8c9ec050b052487a45550a300774f971a8162c8a0

Download Submit
/data/data/com.bnlsicurabnlapp.apk/files/db.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.bnlsicurabnlapp.apk/files/loading.gif

Filesize
73KB

MD5
b939bfddae63d6eeb43f71e60c5fe2e5

SHA1
d20e224ddfac3efc818ca7ec35327b3a549f0e70

SHA256
8b0f662fc6a3c42378b9abe0a47963997a054eba207dd5a1ce8b2c6dbbe71d6e

SHA512
4987a75bf83e843607b7d8a76dcd0fb944298568103f7e9bdbec3b538582e2adaf514ca8d182f8be7dd381a2774fa40146124e58b1e755554c297fbdabb0bb4a

Download Submit
/data/data/com.bnlsicurabnlapp.apk/files/txtscreensize.txt

Filesize
11B

MD5
1b65c10c6215685f9d621d797f911373

SHA1
cc50aaed5cd521a62ec8cf9fe0413153ec90f265

SHA256
2230c2b2787663a054c47450ecd1718f0296853ad768b8e5d306ecb912685e89

SHA512
5a9139f295dbe384b1584eff5c11f3f86759232f7b661b75f27fe92b996b4cdc0552e315f79b26f5f2c1f91756d9ae04cf0c3675b6172e91a3d373b9b314496f

Download Submit