19ae503b906394e3aef852bf93d97c10fb0a26b35955ba002b724993371dc5cd

Analysis

max time kernel
121s
max time network
131s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
12/06/2024, 23:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
19ae503b906394e3aef852bf93d97c10fb0a26b35955ba002b724993371dc5cd.apk
Size 1.7MB
Sample240612-3fagfsvema
SHA256 19ae503b906394e3aef852bf93d97c10fb0a26b35955ba002b724993371dc5cd
MD5 8fb435aefb5f8154f65692431d3ba912
SHA1 02cfc5da14d41187370a1101e08736a44ebb11fa
SHA512 a899bee157f4d846ad494befa94f633505666bf662ec46d5e704bf736af7f10d9b60c4a695923cb0e6502473aee8ab28b0ba4c16ace334dcc7c4654ef4761718
SSDEEP 24576:CY1572ouxWVl69B5k7Vybh/XZhCjw5CsP/9fHDXeSWmZV2/wWDRj/0f5sPpg8CBD:CY1wZxglMgVEJphQwf/4SXk1452xi
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:5043

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/org.zzzz.aaa/files/profileInstalled
Size 24B
SHA256 dbaebd18bbf69ddcafa9b0cc04c0ecdc97767bf362cde8239f93ba0da7579ccf
MD5 9202deb3e095f9bebaf8867d3fd8c21b
SHA1 9f0124bda9050634c8da9d4c374034c965742dd1
SHA512 bc2b9fe25b456ac9b364d8038518419cfde557ad92e11c091d55051d966d517bf13cba3eb96a9ac431a16a90c0b30478846fc7a891011945edb21798baf8eb15
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 1d7ccf0ecd87d5415ab221f77ff0f0498aa50a1698f485aa7fed7c5e5e6be07a
MD5 c1d144c7ffa4463db30f28eadf287199
SHA1 b395486cda55a51538cb2a5e465f28bb90800c82
SHA512 cd273c30f573398ff8eb1a325b9052af4b19cbe9f8da6a593901aad120609477d228a0e7a18b95b146776fde11b0199273b135f5d7bf3a9815c50f08ce6cdb8f
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 1KB
SHA256 b674946e9b2a5689924021441443a6cfdadbc5b8daebab68baf3b93c96ee03f4
MD5 18a1b0c0a9800d54d904f4a5d095a60c
SHA1 ab973da506bdd05437ecf834248aa610e8907690
SHA512 057de3cb674160d9f76f4522c2dfc66fd96947ad412bf9372b29f92d912e983044c3bdc1a7911ac54861f7202d2934a13b515b63cf1d3136849819ed9fef4161
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 2KB
SHA256 b639cf5f7e0c4d22dc37bba93a71c8a03e9ea1caf5d7bb44c1596d12bb7c5649
MD5 60f998333b9791fe1cba0ff38c231796
SHA1 caf0593e43067c5d2a860bc177c5077d45b32512
SHA512 e1107527c751bd33faa6ac51330d34f3c8962cc6688f02694e4dd397c3fc4b2a7a2224bfe6a0986a3f3fed44029ca5fb692ddd9a0b55a3b9709c02a82f8d61a4
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads