81dc4259fd623c047342d03c9edb6bd7d3f060ab7e7ec751855e14e04413d725

Analysis

max time kernel
164s
max time network
131s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
07/07/2024, 22:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

81dc4259fd623c047342d03c9edb6bd7d3f060ab7e7ec751855e14e04413d725.apk
Size

1.8MB
MD5

50af3ffcd7c8c183fe4e20b04340f468
SHA1

991cfa756712a6092e0836732264677c8ab79daa
SHA256

81dc4259fd623c047342d03c9edb6bd7d3f060ab7e7ec751855e14e04413d725
SHA512

f57405f472942ed6863035b520556fd56742e9dfc3218cabf41d29e8096ac59ce4f550e0b43c66ff3341bb97401568c6d9ee3fd1cbe05b58e27b6a58946106d6
SSDEEP

24576:MY17jemsTMkxsVcQKLaL/+xh31Zs0qVDfTIqjTsjM1BEc79w2P5GlcOyPzINd4J3:MY1dsAkquRL+/+L3LqZLItjKd0o

Score

7^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:4489

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
b793d315341800d4141a1e4249aa5105

SHA1
a922b060b07f69e9143357e1a1a63e157d2ab211

SHA256
1fee1fd8e525603fab0abb5fe5d7c4bc10db80e6da9b6ff0eff3f2ce7faeef23

SHA512
3e0be386592284aaa0f4ca3ecb01749fe610cc893c6d4367202f2d0f22e5276aea133ce798974afcdfe315034c4c41825ad63f5d3d407883f50319bfc5b0f75f

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
1KB

MD5
30e8f9f0d065da376c5f929b00d66d99

SHA1
30e1cf6db1af33a5179c7c2bd00ee5f3e1176433

SHA256
6f1a126d9dc2045a00e1b20c233ca64d1d86bea7c005f01392d9cd8ad9aa53ce

SHA512
d5c0489bb984bc30ff90fc2455d2cb39b7c202d9f2c615ab2acc8198225b3339e117310f417a5830a363087b63b1c84515a7148ff94b0e5136bd61014ed3ee52

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
2KB

MD5
ebbce72790ffd338e8fc8e7da024ace8

SHA1
2fafdc6eb75f097f2e3706903a6214d0d831fce9

SHA256
5bfc9ed9663217a9779d5ada9ff2410c77b70ad55bf424931b5d9303840a4fa7

SHA512
21816f7f4c95398b9583377f80445fcb4ffcec28633c9cd125f0223d6a46f85737071528741677a16cc6ad8580009135c639df1f12983dbf5d123265d5945a05

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads