8b0ae6afff5656f4f5c21bf01fae610e38470756042c1044f7dcdc7b9583a790

Analysis

max time kernel
126s
max time network
151s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
16/06/2024, 22:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8b0ae6afff5656f4f5c21bf01fae610e38470756042c1044f7dcdc7b9583a790.apk
Size 1.7MB
Sample240616-2vw4bssbre
SHA256 8b0ae6afff5656f4f5c21bf01fae610e38470756042c1044f7dcdc7b9583a790
MD5 04d753fb425e4f24cd67211d02398064
SHA1 b115ef57c767d69d944a41850c1c01903ce32ab5
SHA512 47f32a326edbb76d9bcaddda530c74540416b298bc94efd3ab437ce6faffb9fe51088dcbd0529ea7d006f35488e6a266086724a509b4591c3c2d57521be6ecb4
SSDEEP 49152:JY1ECxwZ+G05zpj/+UcoB+BmtFYUDlKBMMjyl:XZGrz+hkbYUiFe
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:5048

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/org.zzzz.aaa/files/profileInstalled
Size 24B
SHA256 2763956c6b7cc3517abbf05bd05ca1fcdbb718ecfcd02e37053e2cfdd3aca006
MD5 9b7e0abd7c3ece011ec76e4ab202b92c
SHA1 48b7ae69bae22622875a39bcb65929ae0c86d5bc
SHA512 d06fbdd5585fc4da199adfc316f4a4d234de095ff9c8c636da40b579a536c6191aeebd43d16e24793752a0719ef15479b8698c19e3da4f81c8c6693aa7f29b63
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 bc57daa1e31e36bc351a1f929191f6c843525f0501c37fb4f4654773e4f1afeb
MD5 f0f0d3fe44d7e63033df568fe49fb5ad
SHA1 d256ab038c4f64ef15c5193613a1497129fe7b45
SHA512 d86c6374e8a0dd3258c8623a8ae521e59ea3da2eebbaa0c46dbd868f869a4e8ac685070e860a27f9eb5230e864e5970d40838570b142613da84bcd555fcf5cdb
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 1KB
SHA256 9b30618a9f23eb3b68abada0522bca3002d5fb8737c26ce3ac6f88bad6fcb846
MD5 4420ab3596e50d929a07d74b1f63054f
SHA1 5f98f223417697c0d7dc3e6b89b02958cb00f005
SHA512 f0b86c256742db9c869b41ca1de638bd6d15ffec4a7002f12db43bae7b5df5ec0ad9b8c33da765b41732ce47e145dd9157003dfbe377724c9eadb60ce77a1d33
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 2KB
SHA256 5c421f52338365054d15626fd91c5fe2d20653be0964abe8ae2e8568c85cac8c
MD5 32581b2846429e8f8bb3c12f1e650653
SHA1 192088d138801443103025cb345449abf60d5587
SHA512 e2ffb30f3f387db800de4dbf30ca78c569d58785eae57fa5d5d1231227d3cc5360594f83c869811faba5e6c729b948a3f018199364224694a05dd10610e3f308
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads