ce7e96453d0085eb1b41dd88d5cec1469693edf01ede55ae91c150bb673b7554

Analysis

max time kernel
137s
max time network
139s
platform
android_x86
resource
android-x86-arm-20240506-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
submitted
11/05/2024, 22:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ce7e96453d0085eb1b41dd88d5cec1469693edf01ede55ae91c150bb673b7554.apk
Size

2.1MB
MD5

b3ec4a29581fd5fdc8df403ffca6cf61
SHA1

e3ccc2d215a959ae9b23a7fabcef6b13372f3174
SHA256

ce7e96453d0085eb1b41dd88d5cec1469693edf01ede55ae91c150bb673b7554
SHA512

1e99e50cc58c9a273040aadc62c9eab6ef2012cdc3b19e7fac7ff54853c625a2e009ac53c8c91d4b0a0e525eb902918113e33b2548a043b38ec35fd39f122cfa
SSDEEP

24576:9SFClMQD0Wqu4tjgFsIxin4aoTo+J5jxtkUuQ0Rjs1aU1Vohl16iTbb3:gFClMQD8tjgFNTo+P/aRjjD

Score

8^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:4163

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.zzzz.aaa/files/profileInstalled

Filesize
24B

MD5
3ab3c952268a671d6fe61eb2bae0f1db

SHA1
81ed4fc9de88b79082075bebcc23495074f8e7df

SHA256
20195e6fef1e8a774dd6fbbef3d120a0e73ee06758f297a2f40cb39e233c4de4

SHA512
98e2dfaad1f710ddcfcb000b78fc2b5cd9e7947df3c83cf26c0e6d3265ecf718a84ce606bf7c51f756489b0a6593b63b4745a255610c29bd0cf2fc8dcb9ac893

Download Submit
/data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
8a95d826db7452cfcdd0893af008c7a3

SHA1
86b646303acc277cd7b36c73542ad53a52320636

SHA256
73fe492d86bb967224277149e3026cd15bacd2dfbb3698911fb5840226fbf3b9

SHA512
6a6da8db20478a7f8566c346138ad85e77c4bc1fccdf42e06b1afe172b9361548243c7506450242e5272ce0d8a7fd595ccba1189f2ebc7e8bf811a24228f8437

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
1KB

MD5
4a74a79434c343d21f7cff7b29e9d5bb

SHA1
956ff588e6fa69dfca327d5b643c771a40ef289c

SHA256
79df26fc938f888a9127967705a52b8b71c53c0501b744b2f6e9467918a1cf94

SHA512
d5f20e6c1ce210a5e66c3fa65d9fe088cfdeb67c5fb6b2f98854c83c82d930d3f78d7e4c64cc093a6bc67e753aef6d0e3ef6a55f6a782981a19d401db0433f4f

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
2KB

MD5
658dec1782ce06806442550b2fd0418e

SHA1
3e098737fb8898810003b13b06609632c629e682

SHA256
61afceeee586eb09f5bf53b2a9a319868a01cfe836f04a5b6220f54c79f2b0b4

SHA512
24a430a2cc0cb1b3804c7d10c328f67cd0163e35a906712db63cc84aa53b2abbf503c7a45449cb11804dd49f4b97681135aa008f91b60e3e323760e3a171a6df

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads