8f5e217c3f0b851c992dd53d2b1d5dca67f9a800e31be642168a0cca59fcc67c

Analysis

max time kernel
127s
max time network
146s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
23-05-2024 22:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8f5e217c3f0b851c992dd53d2b1d5dca67f9a800e31be642168a0cca59fcc67c.apk
Size

1.9MB
MD5

bcb21fd950a595d6d55c28c2a55de6d9
SHA1

c5f228e10b8d95574b05be845adc25a7fe23b3fa
SHA256

8f5e217c3f0b851c992dd53d2b1d5dca67f9a800e31be642168a0cca59fcc67c
SHA512

6053e42199e1a60926c73246388d3fbfb70edd97f201f38c114583f3a69b5426b16e134c974cd45b8c172a13136598a6172a8ffa7c8e435402fc4dc183af276a
SSDEEP

24576:tY1eMNik15tH0tY62oTGes2PfZ543XQowakBjiMope7ufc7V1jf8cauHRO1W0RKQ:tY157tHnOpPR5agJxBeMo6Z1aR

Score

8^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

T1516

T1513

T1417.001

T1417.002

Processes:

org.zzzz.aaa

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:4273

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.zzzz.aaa/files/profileInstalled
Filesize
24B

MD5
ca4be6961c9deb7b82fbb6f895831000

SHA1
d7e71c2a75d290000721cf4925226c77bae5fb83

SHA256
b3242c737ecacbd7af7eb07532eb21bbb3582f91c3c6fde2739ff28783ca7f79

SHA512
4ff6591ac81bbb371921bda3bd383d6202122c52e67b18e8c5fa1ef614bd9d8d126ddb3a70a9462d461016f5783a75bf53164202580a2eca8ff85ca4a40faaa6

Download Submit
/data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Filesize
8B

MD5
892671108e500cca617f1c30b407491b

SHA1
baf57bfef3391986ea410bca48b45622be510efe

SHA256
492ad05a63ec75744a181d3fc0925cd5917a32b86f714b68ede8e9f261c64179

SHA512
db6c79ae9e6a8bef4a561b0b554282ec3a4847b4042da5b21f7df187d4882cfdeaeaa3bad6c4afa4197b88cc4c8186d1cbdcf531bfa6ebb38e388126d337aae7

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Filesize
1KB

MD5
80b860cd51c06ec51cb88e81f5502ef7

SHA1
6477b76c320c9d935b43bdd7823a82e6088b1b6a

SHA256
d7bda263d7bff2be34821b360aee1498c1aca9aa213c7601ca33a1dd4ecb5f97

SHA512
c616c3cdba4e18f30961590009520f2faa89a356a0dacd71e2a22a41e8173e3f38963a909315e6a7760404c7c669ad678d315eedbfd40a8133019e1cbe4959f5

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Filesize
2KB

MD5
6bbd72091c4d40e34d03d46cd37025a8

SHA1
f8e2507f43d0a9e3b2138df7f870af347e9736d7

SHA256
30ff1a34b2a0f0975d8d4b3b01e641443eccff566e59aaae3253ab953cb21ccd

SHA512
ddf9f052cab44f4aba1120e7dec521fbfd6990c401e9a87d1404f784fcbcb5522562aa1dac2fe9efa3d867cc8ed6825ec075b441fda68d05c0ee714c19e291fa

Download Submit