Analysis

  • max time kernel
    130s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    23-05-2024 22:01

General

  • Target

    7f462387a033f6bc4956c1d7d93ded7989594370f5b43864a98452872bd1410a.apk

  • Size

    2.2MB

  • MD5

    f27c853c9837498a21cdd0df6f13a3da

  • SHA1

    a03e8ce1eb3a07d48f078c1d20b2fc65d62e136c

  • SHA256

    7f462387a033f6bc4956c1d7d93ded7989594370f5b43864a98452872bd1410a

  • SHA512

    4667453f4d5286247761a56bdbc0096ebb50802def4d620a584435e861d4192c5e2f6ca5282f7425ff924415152712a2e5dad6a991974d5b4315928b5a9c5428

  • SSDEEP

    24576:pAFClMQsICbjS4Nt+L12nkNPbCnsV57AmOIw15Ki8MjvNjiXJmcI4HwkAdFMpdH1:aFClMQvb4mxqoPCya5R8M7RuQaQ+sjC

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

Processes

  • org.zzzz.aaa
    1⤵
    • Makes use of the framework's Accessibility service
    PID:4684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
    Filesize

    8B

    MD5

    82957ccd70f74c14ac6ede9964832306

    SHA1

    e1c19c30fe8671ab3381e7db43eefc9d4bbd912c

    SHA256

    a5498ca25e6548ee9b54111b26309d08c74ac7656a894661d39e7dbfb9c36459

    SHA512

    2acd4407ba6d03da9daa6d41eb36821d738ab96f7b0c985354b03803e3340651679c0a28510835decf76083b460ba6a41c3066a7efefb170020a2a8544efb71a

  • /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
    Filesize

    1KB

    MD5

    c5410007912e083bffefd5b76e40224d

    SHA1

    1d43645fd076f75df13f430b5441d028778fbfa0

    SHA256

    cb770f333013f854842d25c5b29b8ad849d7a3b2352244d29814e2e2c3f678dd

    SHA512

    10d320eeed77d581b088966c620a3b9d45b2249782988469857ef42a352bbc2d183a18adefcb79725b58bb9d24e63e0096d32ebc8c6612e96ff32712b9ea43b9

  • /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
    Filesize

    2KB

    MD5

    9c76f3f50dce8a4e2699bb7cc3d969d0

    SHA1

    ce14f9a141785f63773991f100687ade182621d5

    SHA256

    e7605efdfbc1ca864d1622e1b8d5b6d729fc38f4f7ee1b96dd93f0ff78ebd197

    SHA512

    2b978a2bc2c439b24394eead8a029035a7fb8488a42bdfe2c9abeac9bc5a6733ddef062c5b6702887ec33688c80f5ac41dbce53af79c972fd758610818afed4c