540bd73350236542d2413526c7283f20094dc9ee128f16350e70816916d26a86

Analysis

max time kernel
88s
max time network
160s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
10-04-2024 11:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

540bd73350236542d2413526c7283f20094dc9ee128f16350e70816916d26a86.apk
Size

9.5MB
MD5

ad6f124d00ca05f2a19b5215b85e25a8
SHA1

7ac7d498c22447ac1238a51bd8559882e283e766
SHA256

540bd73350236542d2413526c7283f20094dc9ee128f16350e70816916d26a86
SHA512

cc76ff0f98e6bee9daee24884ab9227674fa06cae0d8a2bd9d9380497a70366fb6bf1a93d8fefdb2ac608e762c05fe671a775a36c67c7df165c845b4040633f5
SSDEEP

196608:ZRGN1me5Clk9gM4ie3LISXz6VaRa8VNsJ6lvzQkOHe58:ZRGn2vblXzer8Skwc8

Score

8^/10

collection evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 2 TTPs 1 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion

Input Injection

T1516

Screen Capture

T1513

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.example.chatapplication

com.example.chatapplication
1⤵
- Makes use of the framework's Accessibility service
PID:4700

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Discovery

Lateral Movement

Collection

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.example.chatapplication/no_backup/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/user/0/com.example.chatapplication/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
02c8ce6f322c4d4e3e7dca0a337a278d

SHA1
c1b17f52436814ec7c833d451c20b7ae32803907

SHA256
c03350dd577ca73d257c93bd3c3a875785efebd9502b21ba06a1e26134547e7b

SHA512
82fd20e5d93af95eea6ab8fce08f216061e25d233d42ed1bf6210184c4a4a127fa53caa7c35610378f2da5893b264b02b77c2c8c16fb031cb4f5d21b4cd5359b

Download Submit
/data/user/0/com.example.chatapplication/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/user/0/com.example.chatapplication/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
4f2c6a21972868f9cb115e61b0732fd4

SHA1
e9f115f0164f666110c22b3a2a9d5afdb9eaa241

SHA256
633735071f684cddb7b786ca1449358dea79488787390e812cf83494eb2386dd

SHA512
1b771e70b4dc35cb34c0bc031c8d49d6d6efad0c13ededf8c4be65f9c84154846b27e9c0a48ac79328bd92d473f280023509824a8e64d059b8b57b61c20f7d09

Download Submit
/data/user/0/com.example.chatapplication/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
6b3586089e81bd782f220af7375cc129

SHA1
db94e5520dff7a92fcc97be7645f718954ead591

SHA256
2d74c737d060bca24a20733fc28b63b06a6ed5370c15b26e97e294c5a11b760c

SHA512
b7e1e6120a17b87545d2e555c0ab6283e0b87219bac181df8d49b6800607854dc10c9924a2e612043b13fdfcfc052bfb86aafc9210a47cf28e6952838affc6c4

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads