irata | c7e3cc7e5fc9a82f02939769b986f5c9ae3ed1b3a88fa24c2c26c7b1d042fb60 | Triage

Sharing

General

Target

92624244ee4834560efedb66224b16ab
Size

1.9MB
Sample

240517-w3wjwacg55
MD5

92624244ee4834560efedb66224b16ab
SHA1

1729594ac913508bd8083a36dbfe8bcee2096805
SHA256

c7e3cc7e5fc9a82f02939769b986f5c9ae3ed1b3a88fa24c2c26c7b1d042fb60
SHA512

8a29cbcc9d33a0a7ea51c090a6212f86f83faf808277d4a18b467d7022394a1a31655489a5ad93318ee2a4ac3785c2eeab5b2d90f89b6a64f3d43cb15e7d98fc
SSDEEP

49152:e0wmpuToZIx+HmXrKRbGaGwSSRhPqvzq0zFU1B/cP:Dw4UoZIx1bdqvRF4F0BI

Score

10^/10

irata android collection credential_access evasion

Malware Config

Targets

- Target
  
  92624244ee4834560efedb66224b16ab
- Size
  
  1.9MB
- MD5
  
  92624244ee4834560efedb66224b16ab
- SHA1
  
  1729594ac913508bd8083a36dbfe8bcee2096805
- SHA256
  
  c7e3cc7e5fc9a82f02939769b986f5c9ae3ed1b3a88fa24c2c26c7b1d042fb60
- SHA512
  
  8a29cbcc9d33a0a7ea51c090a6212f86f83faf808277d4a18b467d7022394a1a31655489a5ad93318ee2a4ac3785c2eeab5b2d90f89b6a64f3d43cb15e7d98fc
- SSDEEP
  
  49152:e0wmpuToZIx+HmXrKRbGaGwSSRhPqvzq0zFU1B/cP:Dw4UoZIx1bdqvRF4F0BI
Score

8^/10

collection credential_access evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection evasion credential_access
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

Credential Access

Input Capture

GUI Input Capture

Keylogging

Discovery

Lateral Movement

Collection

Input Capture

GUI Input Capture

Keylogging

Screen Capture

Command and Control

Exfiltration

Impact

Input Injection

Tasks

static1

behavioral1

collectioncredential_accessevasion

behavioral2

behavioral3

collectioncredential_accessevasion