c7e3cc7e5fc9a82f02939769b986f5c9ae3ed1b3a88fa24c2c26c7b1d042fb60 | Triage

Analysis

max time kernel
123s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
17-05-2024 18:27

Sharing

Report Analysis Logs

General

Target

92624244ee4834560efedb66224b16ab.apk
Size

1.9MB
MD5

92624244ee4834560efedb66224b16ab
SHA1

1729594ac913508bd8083a36dbfe8bcee2096805
SHA256

c7e3cc7e5fc9a82f02939769b986f5c9ae3ed1b3a88fa24c2c26c7b1d042fb60
SHA512

8a29cbcc9d33a0a7ea51c090a6212f86f83faf808277d4a18b467d7022394a1a31655489a5ad93318ee2a4ac3785c2eeab5b2d90f89b6a64f3d43cb15e7d98fc
SSDEEP

49152:e0wmpuToZIx+HmXrKRbGaGwSSRhPqvzq0zFU1B/cP:Dw4UoZIx1bdqvRF4F0BI

Score

8^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

Screen Capture

Keylogging

GUI Input Capture

Processes:

es.adadda.ujd

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	es.adadda.ujd

es.adadda.ujd
1⤵
- Makes use of the framework's Accessibility service
PID:4277

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

Credential Access

Input Capture

GUI Input Capture

Keylogging

Discovery

Lateral Movement

Collection

Input Capture

GUI Input Capture

Keylogging

Screen Capture

Command and Control

Exfiltration

Impact

Input Injection

Replay Monitor

Loading Replay Monitor...

Downloads