Analysis
-
max time kernel
175s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240611.1-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system -
submitted
12-06-2024 14:07
Static task
static1
Behavioral task
behavioral1
Sample
a0b17ad3193e1397dd56581a75b0d61f986e5d4ac58f393b2d9c4bd5f2065b3d.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a0b17ad3193e1397dd56581a75b0d61f986e5d4ac58f393b2d9c4bd5f2065b3d.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
a0b17ad3193e1397dd56581a75b0d61f986e5d4ac58f393b2d9c4bd5f2065b3d.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
a0b17ad3193e1397dd56581a75b0d61f986e5d4ac58f393b2d9c4bd5f2065b3d.apk
-
Size
2.0MB
-
MD5
44ae44a37435b2d773f464978f7d6014
-
SHA1
980a5d682855624c1e9a648d19080ebe1aa03a2c
-
SHA256
a0b17ad3193e1397dd56581a75b0d61f986e5d4ac58f393b2d9c4bd5f2065b3d
-
SHA512
8060eb68e97c4a32406ffcb040bf1fd8b68ae0d40751f18bc9c28f251f3ee42b8256137a76ccddbae10efc6b12ebf31673fe555bf3ba1d44dad69841dba32156
-
SSDEEP
49152:aY1N+RjKP2gMaDKzL1G0pujYvUJenSH0ks:4RSVKzL16Uvzss
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
org.zzzz.aaadescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId org.zzzz.aaa Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText org.zzzz.aaa
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.datFilesize
8B
MD5f5be1ffcc476fccf903d5af8a15cfde1
SHA1ba491fdec5459a3913de441dbcf76e564df99eb4
SHA25699c484be0c364f8d998b5e1415e9629b782018ff7e489682efd27536bbfd5237
SHA512b854c4fcaba851a34507fad67ffeb01206394bcba2ccb2b0ff7281cb78af8080a976231b781581e383daa813037e9ddd82c1bac25699250af61fcd1a62177b87
-
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.profFilesize
1KB
MD5fc2dd91999a4738081038b9e8b968131
SHA12dc1d95421f4a02f8aa319dfd834802121ce773f
SHA2564c5094084345cca53f7207446630b9859532b255a3a6e37475440fb6bdd263dd
SHA5129bcf8d84bd7e33335bb8a2fdcc7fec25ceccc3ac506e9cca59a5c71fb018bbb35d37a2ce927cd6ea082c6a23a98fee42c87dbde09ed9dcdc4846c432c4479360
-
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.profFilesize
2KB
MD54d8b829d254310c960cc3b01f9e25776
SHA192dddd9f8925a819f52f19330ee9c92b55cd7f90
SHA25629733ed2215d33e2db422ac7b803662f5c94aa6bad0c63d01abe7773decca252
SHA512687c96720966ac3c0d332859678f556d9cc99975ea414fc46827882f13cf6c955c8c9ac36c8869ab6f56bb329849c99af561caa83878e3dfc7e3922a36dc0899