6264df1978abf44fbda1de33b32af8d4b90809ffdfda88cbbab729786faff976

Analysis

max time kernel
150s
max time network
175s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
13/06/2024, 01:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6264df1978abf44fbda1de33b32af8d4b90809ffdfda88cbbab729786faff976.apk
Size 1.7MB
Sample240613-cbk5aatepr
SHA256 6264df1978abf44fbda1de33b32af8d4b90809ffdfda88cbbab729786faff976
MD5 3bc038830f971950a2c829f5cc244b6b
SHA1 b6e219ae195f8152d44e33f32b3ede19550b1c8a
SHA512 ee564e670e069f61d8c0fa565d9358106ae2e9cc4eb1ac00e89cb0b6289adc280ed235c3b0d372d5e152d657cb7dff3e6930a3b670d18311170971a4f4d005e7
SSDEEP 24576:oY1/PDwT1kp0xVuU1W4rfUtb9L4jOapE9qEkMhgXnCUsNujCcKOB33mo4zGQ6wMA:oY1Y1++Vd1VcJcOKE9dKntswyKBQ
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:5029

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/org.zzzz.aaa/files/profileInstalled
Size 24B
SHA256 8616a4c5ab5a5a0ce318676110cd909cdcb3cc67d7b8ef650c653dfa97bc0614
MD5 ff969cc15ad2bba8c10c808a884dfecb
SHA1 b101cf91287510817ad69a7245af73e7e5f72f43
SHA512 62318561b0e54019a4447edae5d8664a14e7c5fb4428a581221262063a5952aba6d66a7fec7184ede6c4c272f7383ae0e694984ce809a0578adc1609b2241450
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 2fffaa4459262abe46f4cf55de09d8f3d63bd851d64d19449e799f576e3bebd6
MD5 0184dace22b1e8d08d0a6a58069236f2
SHA1 5ad6093d3de4cbe9a840bcea3de4f275e990c2d6
SHA512 d4c6bde3fee8a320ead01e42de0246760a626eb29637fe3d65b2b50d152d653128148a977146e527cdf8fe59ce4aafcd29a4fe8fab6e3f692ea277f8788774ea
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 1KB
SHA256 4dcaba7f453e3d4dd6bf614985f3f4e73705c188eced3acb48eb1bdb4373bd34
MD5 47f70173ba250bd4a1c89bbf7874a5ca
SHA1 3cd2db098946d3408940eaa103e6088bf7000c12
SHA512 20dc30c144ee3189e1f424b60f5aac900a0202a60f1d5c9323e4671390d9cbaf760badcde9e87cd7de7085ae89184e25efe9d7e001e242b58bdbbf276d012cd2
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 2KB
SHA256 ccdf4a65a311609dbfaf1100cb7d44ef6c908c2bb4d7761fa3645f062d6831ce
MD5 3e69e2900c458bdacf5078cd57ece52d
SHA1 599d28d8c5f26896e4f09893bc6ccb50e2c6903e
SHA512 72a9df600445a070d3b3bebfadd001f4675e8d23e375dfedfff858120ed922dfe6a8178d203aa0967e48937ffc5bee5a79a979b1b4edbb020647a10fa5742975
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads