Analysis
-
max time kernel
130s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
23-05-2024 22:01
Static task
static1
Behavioral task
behavioral1
Sample
7f462387a033f6bc4956c1d7d93ded7989594370f5b43864a98452872bd1410a.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
7f462387a033f6bc4956c1d7d93ded7989594370f5b43864a98452872bd1410a.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
7f462387a033f6bc4956c1d7d93ded7989594370f5b43864a98452872bd1410a.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
7f462387a033f6bc4956c1d7d93ded7989594370f5b43864a98452872bd1410a.apk
-
Size
2.2MB
-
MD5
f27c853c9837498a21cdd0df6f13a3da
-
SHA1
a03e8ce1eb3a07d48f078c1d20b2fc65d62e136c
-
SHA256
7f462387a033f6bc4956c1d7d93ded7989594370f5b43864a98452872bd1410a
-
SHA512
4667453f4d5286247761a56bdbc0096ebb50802def4d620a584435e861d4192c5e2f6ca5282f7425ff924415152712a2e5dad6a991974d5b4315928b5a9c5428
-
SSDEEP
24576:pAFClMQsICbjS4Nt+L12nkNPbCnsV57AmOIw15Ki8MjvNjiXJmcI4HwkAdFMpdH1:aFClMQvb4mxqoPCya5R8M7RuQaQ+sjC
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
org.zzzz.aaadescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId org.zzzz.aaa Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText org.zzzz.aaa
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.datFilesize
8B
MD582957ccd70f74c14ac6ede9964832306
SHA1e1c19c30fe8671ab3381e7db43eefc9d4bbd912c
SHA256a5498ca25e6548ee9b54111b26309d08c74ac7656a894661d39e7dbfb9c36459
SHA5122acd4407ba6d03da9daa6d41eb36821d738ab96f7b0c985354b03803e3340651679c0a28510835decf76083b460ba6a41c3066a7efefb170020a2a8544efb71a
-
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.profFilesize
1KB
MD5c5410007912e083bffefd5b76e40224d
SHA11d43645fd076f75df13f430b5441d028778fbfa0
SHA256cb770f333013f854842d25c5b29b8ad849d7a3b2352244d29814e2e2c3f678dd
SHA51210d320eeed77d581b088966c620a3b9d45b2249782988469857ef42a352bbc2d183a18adefcb79725b58bb9d24e63e0096d32ebc8c6612e96ff32712b9ea43b9
-
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.profFilesize
2KB
MD59c76f3f50dce8a4e2699bb7cc3d969d0
SHA1ce14f9a141785f63773991f100687ade182621d5
SHA256e7605efdfbc1ca864d1622e1b8d5b6d729fc38f4f7ee1b96dd93f0ff78ebd197
SHA5122b978a2bc2c439b24394eead8a029035a7fb8488a42bdfe2c9abeac9bc5a6733ddef062c5b6702887ec33688c80f5ac41dbce53af79c972fd758610818afed4c