c4aac675e5b305e6e11ce75d69fc8edcc4dc213461a0a1290211a43cb16c80d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4aac675e5b305e6e11ce75d69fc8edcc4dc213461a0a1290211a43cb16c80d9.bin
Size

1.8MB
Sample

240706-1xgwratgqj
MD5

f27be1a051c366666b9ac2a8948de77e
SHA1

9e5a0441e7986cd0a8ce47e1b7f28ae36eaa5d69
SHA256

c4aac675e5b305e6e11ce75d69fc8edcc4dc213461a0a1290211a43cb16c80d9
SHA512

6cc3feb1921dd3a293b55a166986d59ad9c15de11c96da87511eeca8d62425cd2ef3face09cd46dd557f65e01a7744157054efd4fc73cbcc7b0d40def15174e5
SSDEEP

24576:uY1ndAmsTMkxsVcQKLaL/+xh31Zs0qVDfTIqjTsjM1BEc79w2P5GlcOyPzIAdprz:uY1xsAkquRL+/+L3LqZLItjKdR3

Score

7^/10

android collection credential_access evasion

Malware Config

Targets

- Target
  
  c4aac675e5b305e6e11ce75d69fc8edcc4dc213461a0a1290211a43cb16c80d9.bin
- Size
  
  1.8MB
- MD5
  
  f27be1a051c366666b9ac2a8948de77e
- SHA1
  
  9e5a0441e7986cd0a8ce47e1b7f28ae36eaa5d69
- SHA256
  
  c4aac675e5b305e6e11ce75d69fc8edcc4dc213461a0a1290211a43cb16c80d9
- SHA512
  
  6cc3feb1921dd3a293b55a166986d59ad9c15de11c96da87511eeca8d62425cd2ef3face09cd46dd557f65e01a7744157054efd4fc73cbcc7b0d40def15174e5
- SSDEEP
  
  24576:uY1ndAmsTMkxsVcQKLaL/+xh31Zs0qVDfTIqjTsjM1BEc79w2P5GlcOyPzIAdprz:uY1xsAkquRL+/+L3LqZLItjKdR3
Score

7^/10

collection credential_access evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection evasion credential_access
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

Credential Access

Input Capture

GUI Input Capture

Keylogging

Discovery

Lateral Movement

Collection

Input Capture

GUI Input Capture

Keylogging

Screen Capture

Command and Control

Exfiltration

Impact

Input Injection

Tasks

static1

behavioral1

collectioncredential_accessevasion

behavioral2

collectioncredential_accessevasion

behavioral3

collectioncredential_accessevasion