a7416e3e6e5b39d16323ff18c6e1e6d2660bcb0b373c08ab3b9851bf516365d1

Analysis

max time kernel
173s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
13/06/2024, 04:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a7416e3e6e5b39d16323ff18c6e1e6d2660bcb0b373c08ab3b9851bf516365d1.apk
Size 2.0MB
Sample240613-e2gkwstgqf
SHA256 a7416e3e6e5b39d16323ff18c6e1e6d2660bcb0b373c08ab3b9851bf516365d1
MD5 ed4249a6160346b5f0ceb53b584f0d6a
SHA1 5c425f30dc17bc1d1a567c6312fbfc9376d96979
SHA512 5a29be102a38ef587f95d4d56542a1a270827b418e5f7770c3f67c0a094268870b36161d948d04c41924d511293111b4c9eb68d94948581765d5ef314eb5b5f1
SSDEEP 49152:GY1+P+pATpKU0PNBLm2e1+WtNVHPwYsjoNK5:c+ipKlPNBLv8FtTH2jok5
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:4276

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/org.zzzz.aaa/files/profileInstalled
Size 24B
SHA256 c5304c99f05879d7b9a06fbd890ade34fba4618c37f867c8b92c8d9f56c11cb2
MD5 8ed71c79187bc74396acfa11d261ba8f
SHA1 6c8a3386bf1bd39e2b5ca7dad1266ad07a6e93ac
SHA512 3e033046ce02e9e5cc047d35bc0cef0d5cb5a87116c7f82ff2f22841078d12844d722c2cd1f8d37f84e486d515a410d2892be25da381b41bf5b2dc7acf64a341
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 7ae37da610c12fc1adaa29c313535d7d9610b8b1a41c8975198b54918c3a4852
MD5 be64701162dd68e025b8a31a56e8046e
SHA1 43fadd65c1f9535a97967948d010d1e074b3a05c
SHA512 2612e9f44624e07e77e34db975cdf97f20badf9c4b8185389eb4b24014c5d58253122a3e0920b73d2637f5eedefa7cb5f04172eeb91ef1d48e0bc9641b18a2c2
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 1KB
SHA256 44c11c69ea15e8631835e9eb42bb2a3c1831bf1212be24597953ebe73a740ef6
MD5 00985024346260189117562cbb127893
SHA1 20345252e0ec2accf45b34d53db718ad82df73ee
SHA512 92a53a4b39a636612283dbe2bc9e048aaa3e33796b241b878758b49e06d012ca07f46432b0cfcca4dd9c822a81a3bf8f19edcfdd3f589e93be9c0f1947822430
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 2KB
SHA256 1e8bfe1001d8f7af28742c1639853f6aee843bdc1b4b4aa0241aba3f6fa0c551
MD5 0b7cb62a02404fc932f3dde700067c11
SHA1 e835f812ce5873f02131fffd018df3aff3ad1f7c
SHA512 da6bcce5533f7e8ab2b481be2fbf66199e4fd4d13001255761b9f410bf98cc22c9d23b9dd7e5378ddbe3ec42d2d7ea0fa93eff07556650d700d8f80d5f607f4d
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads