87f02ef6e8c66fb16810d87a13e2feba2800482facb2d0fa7e81f61901c53f2c

Analysis

max time kernel
126s
max time network
146s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
20/06/2024, 23:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
87f02ef6e8c66fb16810d87a13e2feba2800482facb2d0fa7e81f61901c53f2c.apk
Size 1.7MB
Sample240620-2zckgswarn
SHA256 87f02ef6e8c66fb16810d87a13e2feba2800482facb2d0fa7e81f61901c53f2c
MD5 518e2d45b6288c3bbf4c7d0077f9eeb0
SHA1 cf1230877869804afeb8e65b1ea244ec6741b9a4
SHA512 8695e680aa09bdae85401b4c5f2a81d4e75f5e8653170c1fd20d8ae1017dddafe4f722cc7807937cacef523d8969d6c7be9ff16894806a8949c685bf80cd404c
SSDEEP 24576:mY13lv3f/efyydpQaMoLcFw6S54z9PttjQIvB8qE++mvAsBoePlhKD:mY13VPxabLcFw/mBH5K6DBfS
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:5127

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/org.zzzz.aaa/files/profileInstalled
Size 24B
SHA256 7af5039bbe275f5b14f92c701ecd88321324aeb60793c0a380490d52a6dade4f
MD5 e994db33e6bdeb50e9badd586c7cc78f
SHA1 9f8bc5eb484c4a9e8e47d8c48b1e1738d2933625
SHA512 fca7c88d997a813882beae9e8250ae2b67f3484622cce1e3593d53e08fbacd210338bec40e6e4eee75974709df98c785a02fffe38bf3f5cdf8876922be65638b
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 363d98b71291f18b7c78d0b54dd7085308c82fa29dadf0b684b11deb672107a4
MD5 e0f55fc6c9fa51f962492154d7588285
SHA1 11d94bdc9be7af802238202c88c42edbc073ea75
SHA512 c10586549cee80cd827ec0e5838eda0e18a907cb31726560331ca3850d1b1b804d6aa7e06fe3723dfd91ccb9577861b449309fb4d50064979cf0e34f4d2da8b0
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 1KB
SHA256 3420976c9951be4fe3b2cba6ce38340977c2dce369d648d4e220d72ceee35a6a
MD5 a377ea8022d72dbeefe49ae2fbf32598
SHA1 a1df669a124cd147a3c96b16d8caf6933813b24e
SHA512 637b9e7493691601d273105d0c51019b74597efaa4b51fbe52ec3afe8943e3812202b0f6cb7412e3365ef8188880cb97432e8a46639f1e2719deb4228f6bb086
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 2KB
SHA256 8de44620920b00632cb98055b74b48538638ca32b48d3ca0058edbd1cdd7b06e
MD5 677ce4ddecc0c6bead267936e06a3b5d
SHA1 374b415ca91a5a6b05da981ecee16fcd3f64c200
SHA512 55d239d31ca13748cafbf5a5b54a483debdf7228ca7c71eddd1b4b8defc6f81726c0276a3ac0089611f27cac9fffcc95e62205de6034b6813856f34494431bd9
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads