d8c67a6df2dc3802139dc35f15a8e9adaeb6d3136e589690c729bc7cdf9264da

Analysis

max time kernel
12s
max time network
146s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
14/06/2024, 00:44

Target
d8c67a6df2dc3802139dc35f15a8e9adaeb6d3136e589690c729bc7cdf9264da.apk
Size 2.2MB
Sample240614-a3vrpasalk
SHA256 d8c67a6df2dc3802139dc35f15a8e9adaeb6d3136e589690c729bc7cdf9264da
MD5 d9ae1e792a50a049a223cd57ae16d0c2
SHA1 8248884c036e719e2ff14718f95b040763011d9d
SHA512 3efd4b4657694d87e11b9fc71e80364b2a6f2932f6424a51a6923956d66d76e8869b2db9189ba8b95d883ef196dfe51db2e389196c3855aaa61dfefaea86fa18
SSDEEP 49152:WDvjprJAN13nqKf5AOitoCH/KOksG+Cv851MTvu4Bg8vHfrbhIv:WzjM/jFitoCHfn8voOHHfrbhIv
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

Input Injection

Screen Capture

Keylogging

GUI Input Capture

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.perl.gqn

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Broadcast Receivers

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.perl.gqn

com.perl.gqn
1⤵
- Makes use of the framework's Accessibility service
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5044