540bd73350236542d2413526c7283f20094dc9ee128f16350e70816916d26a86

Analysis

max time kernel
95s
max time network
155s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
10-04-2024 11:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

540bd73350236542d2413526c7283f20094dc9ee128f16350e70816916d26a86.apk
Size

9.5MB
MD5

ad6f124d00ca05f2a19b5215b85e25a8
SHA1

7ac7d498c22447ac1238a51bd8559882e283e766
SHA256

540bd73350236542d2413526c7283f20094dc9ee128f16350e70816916d26a86
SHA512

cc76ff0f98e6bee9daee24884ab9227674fa06cae0d8a2bd9d9380497a70366fb6bf1a93d8fefdb2ac608e762c05fe671a775a36c67c7df165c845b4040633f5
SSDEEP

196608:ZRGN1me5Clk9gM4ie3LISXz6VaRa8VNsJ6lvzQkOHe58:ZRGn2vblXzer8Skwc8

Score

8^/10

collection evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 2 TTPs 1 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion

Input Injection

T1516

Screen Capture

T1513

Processes:

com.example.chatapplication

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.example.chatapplication

com.example.chatapplication
1⤵
- Makes use of the framework's Accessibility service
PID:5030

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Discovery

Lateral Movement

Collection

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.chatapplication/no_backup/androidx.work.workdb
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.example.chatapplication/no_backup/androidx.work.workdb-journal
Filesize
512B

MD5
3c5a6f2494fb6825f7a8099baa4daf24

SHA1
e7ebb03dd812dfc31492aa51c5adb64f0338e8dc

SHA256
1f6fe5313d91065f8803083b4d64c175c71db9d43fa945621d28624f9e2bb348

SHA512
2ed8a5b5ab79cd97428785c650230ed6205a8e63e130da2f2bc19d3f4ade5b808521b0d0fa89b5431d9c6cc37967b168bd9fa477cec737e0dce611ce82f412ca

Download Submit
/data/data/com.example.chatapplication/no_backup/androidx.work.workdb-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.example.chatapplication/no_backup/androidx.work.workdb-wal
Filesize
16KB

MD5
64f8c1aaba1ee6eecbd945f7f12802fb

SHA1
1731afcf781c1dc52f87e5db11ada11ee2de285a

SHA256
cc7ebd41a8af6ad2cd5399dae46a44bbd382e3023e4f13a1ab1f936d517773b8

SHA512
bceda51076f50d388cbbc0b9040c6e95b867433adfb48b2d55657210f6bd4b01e26083ae15899ebd66889db6e2128fa1041d5c00f2ce986b1e2e785ee45915f2

Download Submit
/data/data/com.example.chatapplication/no_backup/androidx.work.workdb-wal
Filesize
108KB

MD5
2852f8ac6c070d5efad9656302303e3a

SHA1
42085533c4a9e1113cc3688c3e2671405ecfb27f

SHA256
278a1152b513d6e3117c5cde065fa0b9f08bfbb694d01db714583ef1977b1603

SHA512
c0f04df1829b27e5d256cebc9501dafd7b818a80cf3e5a1a1231cd9ad4bda36cb8aa193e6cebc76e759f979161a39430bbda87a0fce30ec993f1deba0f21da05

Download Submit