cb6cf5ffa406dbea2cf137e97a3fdd6c04ef42fe76e09bf2f4cc837fd57a5c69 | Triage

Sharing

General

Target

cb6cf5ffa406dbea2cf137e97a3fdd6c04ef42fe76e09bf2f4cc837fd57a5c69.bin
Size

1.8MB
Sample

240726-1wmqlsxdkq
MD5

8aa766c6e7aaa0a078238bebcaa472a4
SHA1

de41223d38b5e0ec19936a57b1c8b1c84bc7edab
SHA256

cb6cf5ffa406dbea2cf137e97a3fdd6c04ef42fe76e09bf2f4cc837fd57a5c69
SHA512

cc66d69a6fce08933b30addfd2ed3d152dd24906aee835509452417aa32db1a66a973bb5f2ab2e096661dd0720a406bd1b88fc92cb0ca3b72acbe1c2806ea577
SSDEEP

24576:hY13cthBl8h0tcnyxrDXiXXMQvy96healOeX2rW6aI/jS1tCpFrwo0P5h1ioM0WA:hY1chjYQxrDyMQvy9OB0a2rW69vfZBQx

Score

7^/10

android collection credential_access evasion

Malware Config

Targets

- Target
  
  cb6cf5ffa406dbea2cf137e97a3fdd6c04ef42fe76e09bf2f4cc837fd57a5c69.bin
- Size
  
  1.8MB
- MD5
  
  8aa766c6e7aaa0a078238bebcaa472a4
- SHA1
  
  de41223d38b5e0ec19936a57b1c8b1c84bc7edab
- SHA256
  
  cb6cf5ffa406dbea2cf137e97a3fdd6c04ef42fe76e09bf2f4cc837fd57a5c69
- SHA512
  
  cc66d69a6fce08933b30addfd2ed3d152dd24906aee835509452417aa32db1a66a973bb5f2ab2e096661dd0720a406bd1b88fc92cb0ca3b72acbe1c2806ea577
- SSDEEP
  
  24576:hY13cthBl8h0tcnyxrDXiXXMQvy96healOeX2rW6aI/jS1tCpFrwo0P5h1ioM0WA:hY1chjYQxrDyMQvy9OB0a2rW69vfZBQx
Score

7^/10

collection credential_access evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection evasion credential_access
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

Credential Access

Input Capture

GUI Input Capture

Keylogging

Discovery

Lateral Movement

Collection

Input Capture

GUI Input Capture

Keylogging

Screen Capture

Command and Control

Exfiltration

Impact

Input Injection

Tasks

static1

behavioral1

collectioncredential_accessevasion

behavioral2

collectioncredential_accessevasion

behavioral3

collectioncredential_accessevasion