3462e79f6bedf3cf7849e6e09384df9957edcf9c51493add32d2f9636d0ddbf1

Analysis

max time kernel
179s
max time network
146s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
26/06/2024, 05:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3462e79f6bedf3cf7849e6e09384df9957edcf9c51493add32d2f9636d0ddbf1.apk
Size 1.7MB
Sample240626-ghchyaybpd
SHA256 3462e79f6bedf3cf7849e6e09384df9957edcf9c51493add32d2f9636d0ddbf1
MD5 1d2ad29f663e2b5df9abcf533179e8fd
SHA1 74393be8fc15836e1a37220732ab38df2f511821
SHA512 e3b31db06111cf134c210eab923393b9869089a08fc23778ebada24391684c90ff552ec1f46b861316b4c0a256355bd294f8512110ecc0941fc9473d765c20a8
SSDEEP 24576:aY17jF+OEBpFKMfAH54N7PXiz69AE7uTFdgqzajFxDGrvr+YH+pyydaLZeYMrmYQ:aY1n0BpgMNq69AE7uReq+L0T+1OMw
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:4927

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/org.zzzz.aaa/files/profileInstalled
Size 24B
SHA256 4fe6832d661238b0336fd293a16cf0337200e3c7f94268b58838b3cd169a9b81
MD5 a24e91814359eec07a3e9e0f4b10cae0
SHA1 51dfc3b218d13ebcaa1fa208a90d74ff0075df47
SHA512 3a21789f6c54ae9fe6f76fc04f0dbb22c61b7612ea12f6af999052bed7246926697ffb3c4734a58f005f7c0203728b8ce52b707f4525e0b5049d91a989c914c2
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 9e219c5c6496856cab8733df689ec1f83bf2430d370a17ae20b0ac7a746cad93
MD5 9b78de90ea499a31c80b07449c234458
SHA1 7a83b7195b53b6ecfe64a3239a8f0adb26717268
SHA512 192e54de91278bb2e222c88590f06cc2a8ccd69841767cbff9a2856fa9b147bdef9de7675df2db2e446152e1bcbd390b42308b562e7bcd59f6ddb80e7aa8a701
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 1KB
SHA256 f04d231f41ddefd63faf8e607966ff5573b0336d28f1be131cbab4222db39b54
MD5 fe86cf3c2a692144aba796cf655dff2c
SHA1 e102efd60b9aeb1c2ac7302c17a8413fec315b05
SHA512 263fcff4d7c2277b66fb352151b6c500e73400a4c5e41594b00616515c91ff339cdd1ac635b38bb5d177c1cca45adcaf53ae178895249317a000ece4119fb325
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof
Size 2KB
SHA256 6a5f85406f049b830a5eb9e54903f6ca71d964e182793f4e810f44075367165d
MD5 3bde1e82c52f78aaf2279f699b0bb567
SHA1 b2e13130cdabc40763edd1e7d33b7e77f92450ed
SHA512 60355e355e5072fef424a237b03e6baae82714dda259b3f785df1faf1a5d1f4dba4edac79de304a9b29d6e62f2a1d804721034eec399d5bde73e59e6b4cfff64
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads