934ff87f7bd751327e4ba8b9048987761dede4f1d794cf8d4d007a5de71bf0d0

Analysis

max time kernel
131s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
29/05/2024, 22:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
934ff87f7bd751327e4ba8b9048987761dede4f1d794cf8d4d007a5de71bf0d0.apk
Size 1.7MB
Sample240529-2hezaadc57
SHA256 934ff87f7bd751327e4ba8b9048987761dede4f1d794cf8d4d007a5de71bf0d0
MD5 ce31dacf70c43d28ac8fedc38242ec11
SHA1 0b38c1dfc911a914d276b450b52f3e4422295b08
SHA512 10b55443fc4b19a4fb52100e7e5d7110d7b021e49814bd594a352cce41f54b8e2e93f0aa8d04a727eb7710f6ddba9694e1653634d2f8e7369890a73ac75b6074
SSDEEP 24576:SjY1i/qEIJCRK/Izd2GPMp3aHBWF2KGhSNzasjnCsJq+gmA9d/bnv/hvgr:SjY1RCRK/I/waHBMrXrMgI/m
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:4564

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 87b32cefa447748dc01a92fb9afc2fe53ce97dde99424e03ac9366d0a81108be
MD5 e1382ca5bf4564e4d5e068e87ec9c186
SHA1 c5a6ecfe85fc3bfad9c49dc7a44dfda80795c823
SHA512 a739eb129db099b55a1d210ed66a6591e2037aed8fcad9296188d56ede17ad96f24cbe8af60256ef89c5e793fc6e6e9f08e2cc693736c8934c26b5b367a186ae
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 1KB
SHA256 f29219c7364ea2e484b5a16e52477edb71eee06b5053dabc6fc43cb00566b734
MD5 0d340d1e34598082d0c10c62e4def629
SHA1 7fcb71fc24ccabbd0e710c62ad048afc6273dd22
SHA512 fcc54f3e9cdfd91885aef013e8a08f021cd8497a30aaa61b40adaa3d55b4285128fcc533c4d0e73b0a37a6b34a9654b5d937a5dc296b27a8ccbb98ca0d56ea8a
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 2KB
SHA256 03b2fec106cd5af8c40822b2e84d039c4a25e0e4388e93f3954dbe89c4ce736b
MD5 5172456f12a5b9f3ce96198698c1ea8d
SHA1 7422a263741b0ce0224e88325c0d610694621269
SHA512 71e6c894ad47ee2e88cc52aa039dba69f98b77d69c18d1845a2d826e06ba1fd1fb60d787fa9ee2dda42380d797ae6dd0d69c407aa14ec2e92a7887d7cc27d967
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads