ce7e96453d0085eb1b41dd88d5cec1469693edf01ede55ae91c150bb673b7554

Analysis

max time kernel
115s
max time network
154s
platform
android_x64
resource
android-x64-20240506-en
resource tags

androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system
submitted
11/05/2024, 22:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ce7e96453d0085eb1b41dd88d5cec1469693edf01ede55ae91c150bb673b7554.apk
Size

2.1MB
MD5

b3ec4a29581fd5fdc8df403ffca6cf61
SHA1

e3ccc2d215a959ae9b23a7fabcef6b13372f3174
SHA256

ce7e96453d0085eb1b41dd88d5cec1469693edf01ede55ae91c150bb673b7554
SHA512

1e99e50cc58c9a273040aadc62c9eab6ef2012cdc3b19e7fac7ff54853c625a2e009ac53c8c91d4b0a0e525eb902918113e33b2548a043b38ec35fd39f122cfa
SSDEEP

24576:9SFClMQD0Wqu4tjgFsIxin4aoTo+J5jxtkUuQ0Rjs1aU1Vohl16iTbb3:gFClMQD8tjgFNTo+P/aRjjD

Score

8^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:5127

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.zzzz.aaa/files/profileInstalled

Filesize
24B

MD5
7d736885d439adbda4bdbcba6076fb0b

SHA1
cf35f243e1e2d6db7fe5197853c188cb1a7c5236

SHA256
b7a37cfef0989d1bc6c11d1e3f31a164a6b198e0a1998284cda2b78f4961f470

SHA512
06fd7a46fb2042181ba630e5fc6dd63eb91e07a3cedb03b0b5e85f53d368c3c1334ac9f3bf2084447d5f00056a800271d27c11f480526f445bcb11b7b705a004

Download Submit
/data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
00ca9346faf48fb50727f1efeeb3e9b4

SHA1
59cd55e52e1b72c07babc15619644e3dd563a7e7

SHA256
add3d3c6405e59ee03f27298958d699fa25eaa701d6bfc5d67908e5696e77959

SHA512
b589a4098b1417abd738464151de01a3770e35ddfb7c0d24593f843c97d73d814da9ea9ca4a6a9b871ad0dbe94f82cba60db1409aa07848aaebd8978260f75d8

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
1KB

MD5
4a74a79434c343d21f7cff7b29e9d5bb

SHA1
956ff588e6fa69dfca327d5b643c771a40ef289c

SHA256
79df26fc938f888a9127967705a52b8b71c53c0501b744b2f6e9467918a1cf94

SHA512
d5f20e6c1ce210a5e66c3fa65d9fe088cfdeb67c5fb6b2f98854c83c82d930d3f78d7e4c64cc093a6bc67e753aef6d0e3ef6a55f6a782981a19d401db0433f4f

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
2KB

MD5
730e541e7c494ffd54079f45ce6b5832

SHA1
18063a874d5d78f44af6bc2370dda1394ba70241

SHA256
f223fd219bdd27572f609eb9637b0189496034ad3cbcdee596975f1c64ef013a

SHA512
a58586a2d8d6bbe872635c25b4158765e0b176f8c5e8edf5ed9013f53cd7b482c80ce9eb7e5910bdc199a8b12205e479901394c7668981bb940a28a53a493d5c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads