adc3fa82526d9da71c3992edc7733556ee6d6bbf2445a361d5498e877f4ef112

Analysis

max time kernel
163s
max time network
131s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
28/05/2024, 22:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
adc3fa82526d9da71c3992edc7733556ee6d6bbf2445a361d5498e877f4ef112.apk
Size 1.8MB
Sample240528-1y2mjsfd59
SHA256 adc3fa82526d9da71c3992edc7733556ee6d6bbf2445a361d5498e877f4ef112
MD5 d1d02e63e60706bc0c7bfde238d3544d
SHA1 c3e3a9bb066df415008dc06c60bd7d0ded109ae0
SHA512 509a9ff768b935c630e24ffe6cc4ea0d411d89356d92f5c8fd87e12c2a2fc053e02c491dc82f41ec538ba4c4ef8675e7cea549d4599b2b900cdec2fbf8807a7d
SSDEEP 24576:ZY12kJCdvY2JiysXcCv1NuXL8VetCLdk2Rqbmb0A1zPlQNnjqoenxqAXjktRpMOq:ZY1P2dsX3CXQZK2Mc1zPlQNn+ElqtYnU
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:5089

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/org.zzzz.aaa/files/profileInstalled
Size 24B
SHA256 6e2f7b078fb4733ce525d49f0fcaafd2afd994cd987297789ca4869bb3edbfec
MD5 42b21560a60cc60c982c005a26908384
SHA1 307a67e3143b407923515c6db63d3cc41b95f927
SHA512 ecba8f54d92d5e8567da1fd6f886861366a51cdca510dd922e084e5a508d6f9616064f9f9e18c5bc49adcf51d90abdbeaba09bd0c5965b37d93b136218cba16f
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 65969f6fcccf458e6952ce9589072aa7b77075d6abfd57ff47cd4447ef5d2d4e
MD5 2ec555a73eb5169a6a79bbfa7d3d0863
SHA1 cc4fbda4231b097996459974a03ed7a0edaf9c7e
SHA512 ce5d1b42faa473ab572b56542da450e49ce4234f3713c1696d7e7fcf5f8ec19fc2bfbe898ed2850651a37ae00b3c49ce43be679362930d3818470d6e1627f965
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 1KB
SHA256 fb39f614f14eb9d56c0a27cd7ab73d1cdea49b201ab416c105d7b1439e41e61a
MD5 d1cf5fe261434107aa92e0cee487cd2f
SHA1 784485b2ced2cf5549b2ffeb0fb457357b41abe0
SHA512 5e3d903fd892c9ab4635ea5348b6dcbee21977086fb58d82e1af4e0e9a47c80b49c479d41af46afbf7d8c1f8ade88ff55986e643e2f9fb76eedbce2e2fed5803
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 2KB
SHA256 dc4eafdbda1d5f6a11d1daadb716de9a012df51ea5e67493656cd369eac48ea5
MD5 52104ad0f9b9bf89e7e4c1fb8c92ff90
SHA1 149e0dedb6e0accc38faf0f4980f011cc7a4e5e8
SHA512 610fea933ec9cf10b5fcf53215c79ace6bd12c6f9d3d106b33220989d433b765b21457627d65d41c24a5bc09f0af7fc3c175404bf23a3c339fa09a74619560c2
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads