9b65728a2ec1be34bef7136e23ea795efa2532c247e179e2ecea84062f24269d

Analysis

max time kernel
91s
max time network
138s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
10-04-2024 12:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9b65728a2ec1be34bef7136e23ea795efa2532c247e179e2ecea84062f24269d.apk
Size

9.8MB
MD5

ed43605e6d85c7eab473c30ec1b2271a
SHA1

a294ff5e954649bce9032b19a461216f6a1c92d3
SHA256

9b65728a2ec1be34bef7136e23ea795efa2532c247e179e2ecea84062f24269d
SHA512

21998c95516bb100ba89fdf9b345779593dae574c74b7fff16cb99754bcaf5c5cbde52be40655fb5382c9ee80ffa78050e6bccc5390e98fa77f5ed50d6adeb57
SSDEEP

196608:XA4uN1meZWhGOteVVqJbNsROw67ek7JANidV5zmnT3N:XA4un6deWb2Rrqek3uDN

Score

8^/10

collection evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 2 TTPs 1 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion

T1516

T1513

Processes:

com.example.chatapplication

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.example.chatapplication

com.example.chatapplication
1⤵
- Makes use of the framework's Accessibility service
PID:4478

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.chatapplication/no_backup/androidx.work.workdb
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.example.chatapplication/no_backup/androidx.work.workdb-journal
Filesize
512B

MD5
f3e30f81a448b3cfbcd689647fef7fdd

SHA1
6d1e58b751781cbeac13c1cc8623eb32cf187a05

SHA256
d6bc18b43c2b828e2dfe61083202936684658f595320c2d38ba7d92300507dd2

SHA512
8085b8518653ead88635f50566c2b730d2a079dd6e5b93a1cc38289efe75fa7849a78a3d4b2f04a855fa1e50184818deaee3274ce4da7846db05a8ca2ad7eb53

Download Submit
/data/data/com.example.chatapplication/no_backup/androidx.work.workdb-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.example.chatapplication/no_backup/androidx.work.workdb-wal
Filesize
16KB

MD5
f1d96ee68b0c68269f2710b0e8200ea9

SHA1
379c02ffd84dc6b985e44e044a1ddd2b587dfd0b

SHA256
a8ceb5f790e2bc5f92a8b49aad2820e0da142c56033511123e4e041964c38895

SHA512
cb651a70aea851c238f94a32d944148e8cfa348c95ce6d34cf78257a793684d6d852416edc5dc00d05edfc60e17a0e1e245e04ba07b6830b542f79881d0edfb4

Download Submit
/data/data/com.example.chatapplication/no_backup/androidx.work.workdb-wal
Filesize
108KB

MD5
94bcde5500371af115e617207f561e44

SHA1
f12078180bae32b3fb683d1ae96ac83e566b79d6

SHA256
f0c646c3854b4067d93cd812bafad3e169675ebf1bb2f70d7dee8bb9a6b54aee

SHA512
ec5502f6725e347396d0db62697a0e0c28e805ea2fa4ef56bcde43a89292032189b8380673a149521aee8368b2756b10143fc35e0fd5b41b6bfe63013d048ffb

Download Submit