Overview

overview

8

Static

static

6

8f5e217c3f...7c.apk

android-9-x86

8

8f5e217c3f...7c.apk

android-10-x64

8

8f5e217c3f...7c.apk

android-11-x64

8

Analysis

  • max time kernel
    178s
  • max time network
    138s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    23-05-2024 22:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8f5e217c3f0b851c992dd53d2b1d5dca67f9a800e31be642168a0cca59fcc67c.apk

  • Size

    1.9MB

  • MD5

    bcb21fd950a595d6d55c28c2a55de6d9

  • SHA1

    c5f228e10b8d95574b05be845adc25a7fe23b3fa

  • SHA256

    8f5e217c3f0b851c992dd53d2b1d5dca67f9a800e31be642168a0cca59fcc67c

  • SHA512

    6053e42199e1a60926c73246388d3fbfb70edd97f201f38c114583f3a69b5426b16e134c974cd45b8c172a13136598a6172a8ffa7c8e435402fc4dc183af276a

  • SSDEEP

    24576:tY1eMNik15tH0tY62oTGes2PfZ543XQowakBjiMope7ufc7V1jf8cauHRO1W0RKQ:tY157tHnOpPR5agJxBeMo6Z1aR

Score
8/10
collectioncredential_accessevasion

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

Processes

  • org.zzzz.aaa
    1⤵
    • Makes use of the framework's Accessibility service
    PID:4508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
    Filesize

    8B

    MD5

    2e41c63cf48b2092787951973c3a8095

    SHA1

    72f3b59b107a2ba4ffa97273c76963242948e5db

    SHA256

    fa43cf1a50808606f350ba0d87321a47c3bb1733a499677211035712fd5f65b5

    SHA512

    5bbd757c299b4973bbb2fafe5a081e768193c6fec770c542320313396d8c0b35838a8149f857f6da8adf6f79b4ea420479265ac753487e6f687e6e16289f5861

    Download Submit
  • /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
    Filesize

    1KB

    MD5

    80b860cd51c06ec51cb88e81f5502ef7

    SHA1

    6477b76c320c9d935b43bdd7823a82e6088b1b6a

    SHA256

    d7bda263d7bff2be34821b360aee1498c1aca9aa213c7601ca33a1dd4ecb5f97

    SHA512

    c616c3cdba4e18f30961590009520f2faa89a356a0dacd71e2a22a41e8173e3f38963a909315e6a7760404c7c669ad678d315eedbfd40a8133019e1cbe4959f5

    Download Submit
  • /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
    Filesize

    2KB

    MD5

    de23ffa712197b33d1a8f9d391eb501c

    SHA1

    72af009668f52569b53da67ce7396c25db21fe3d

    SHA256

    0ad3c77bc43a4450f3656dbb457c1ffb07c141aad557151aa2723c52218b987a

    SHA512

    e298481133d7c490956fd171011a2c88f495d7d3df19f1751f8ba910aa5251ef857c04cc0c35a0062470679d8f4e7693ed6c50ec8d90c2dcde981979b4201e14

    Download Submit