irata | d333fda60b5f62c61be6214e64fe79ee78c66bdd1f995736aeeb33cddc7494ea | Triage

Sharing

General

Target

57f75ad95573f857fcfe13aaa3847511
Size

2.0MB
Sample

240517-w1q7dacf43
MD5

57f75ad95573f857fcfe13aaa3847511
SHA1

06c78273196985b2c2a377624709c7a1a42bfe1f
SHA256

d333fda60b5f62c61be6214e64fe79ee78c66bdd1f995736aeeb33cddc7494ea
SHA512

45933fffed33fe3fd918be295e2de337c6cc06f18ac6c35c5c82d05513b90ab0d19fc133de9372be870acb705b306512e5969adf2627e07f93f79f8505553c4e
SSDEEP

49152:W0wm8uToZIx+HmXzh0FDe2PLWXJdm+Mb3Zqw:bwFUoZIx1Y61Mb4w

Score

10^/10

irata android collection credential_access evasion

Malware Config

Targets

- Target
  
  57f75ad95573f857fcfe13aaa3847511
- Size
  
  2.0MB
- MD5
  
  57f75ad95573f857fcfe13aaa3847511
- SHA1
  
  06c78273196985b2c2a377624709c7a1a42bfe1f
- SHA256
  
  d333fda60b5f62c61be6214e64fe79ee78c66bdd1f995736aeeb33cddc7494ea
- SHA512
  
  45933fffed33fe3fd918be295e2de337c6cc06f18ac6c35c5c82d05513b90ab0d19fc133de9372be870acb705b306512e5969adf2627e07f93f79f8505553c4e
- SSDEEP
  
  49152:W0wm8uToZIx+HmXzh0FDe2PLWXJdm+Mb3Zqw:bwFUoZIx1Y61Mb4w
Score

8^/10

collection credential_access evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection evasion credential_access
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

Credential Access

Input Capture

GUI Input Capture

Keylogging

Discovery

Lateral Movement

Collection

Input Capture

GUI Input Capture

Keylogging

Screen Capture

Command and Control

Exfiltration

Impact

Input Injection

Tasks

static1

behavioral1

collectioncredential_accessevasion

behavioral2

behavioral3

collectioncredential_accessevasion