9b65728a2ec1be34bef7136e23ea795efa2532c247e179e2ecea84062f24269d

Analysis

max time kernel
91s
max time network
138s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
10-04-2024 12:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9b65728a2ec1be34bef7136e23ea795efa2532c247e179e2ecea84062f24269d.apk
Size

9.8MB
MD5

ed43605e6d85c7eab473c30ec1b2271a
SHA1

a294ff5e954649bce9032b19a461216f6a1c92d3
SHA256

9b65728a2ec1be34bef7136e23ea795efa2532c247e179e2ecea84062f24269d
SHA512

21998c95516bb100ba89fdf9b345779593dae574c74b7fff16cb99754bcaf5c5cbde52be40655fb5382c9ee80ffa78050e6bccc5390e98fa77f5ed50d6adeb57
SSDEEP

196608:XA4uN1meZWhGOteVVqJbNsROw67ek7JANidV5zmnT3N:XA4un6deWb2Rrqek3uDN

Score

8^/10

collection evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 2 TTPs 1 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion

Input Injection

T1516

Screen Capture

T1513

Processes:

com.example.chatapplication

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.example.chatapplication

com.example.chatapplication
1⤵
- Makes use of the framework's Accessibility service
PID:4478

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Discovery

Lateral Movement

Collection

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.chatapplication/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.example.chatapplication/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
f3e30f81a448b3cfbcd689647fef7fdd

SHA1
6d1e58b751781cbeac13c1cc8623eb32cf187a05

SHA256
d6bc18b43c2b828e2dfe61083202936684658f595320c2d38ba7d92300507dd2

SHA512
8085b8518653ead88635f50566c2b730d2a079dd6e5b93a1cc38289efe75fa7849a78a3d4b2f04a855fa1e50184818deaee3274ce4da7846db05a8ca2ad7eb53

Download Submit
/data/data/com.example.chatapplication/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.example.chatapplication/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
f1d96ee68b0c68269f2710b0e8200ea9

SHA1
379c02ffd84dc6b985e44e044a1ddd2b587dfd0b

SHA256
a8ceb5f790e2bc5f92a8b49aad2820e0da142c56033511123e4e041964c38895

SHA512
cb651a70aea851c238f94a32d944148e8cfa348c95ce6d34cf78257a793684d6d852416edc5dc00d05edfc60e17a0e1e245e04ba07b6830b542f79881d0edfb4

Download Submit
/data/data/com.example.chatapplication/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
94bcde5500371af115e617207f561e44

SHA1
f12078180bae32b3fb683d1ae96ac83e566b79d6

SHA256
f0c646c3854b4067d93cd812bafad3e169675ebf1bb2f70d7dee8bb9a6b54aee

SHA512
ec5502f6725e347396d0db62697a0e0c28e805ea2fa4ef56bcde43a89292032189b8380673a149521aee8368b2756b10143fc35e0fd5b41b6bfe63013d048ffb

Download Submit