cb6cf5ffa406dbea2cf137e97a3fdd6c04ef42fe76e09bf2f4cc837fd57a5c69

Analysis

max time kernel
166s
max time network
154s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
26/07/2024, 22:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cb6cf5ffa406dbea2cf137e97a3fdd6c04ef42fe76e09bf2f4cc837fd57a5c69.apk
Size

1.8MB
MD5

8aa766c6e7aaa0a078238bebcaa472a4
SHA1

de41223d38b5e0ec19936a57b1c8b1c84bc7edab
SHA256

cb6cf5ffa406dbea2cf137e97a3fdd6c04ef42fe76e09bf2f4cc837fd57a5c69
SHA512

cc66d69a6fce08933b30addfd2ed3d152dd24906aee835509452417aa32db1a66a973bb5f2ab2e096661dd0720a406bd1b88fc92cb0ca3b72acbe1c2806ea577
SSDEEP

24576:hY13cthBl8h0tcnyxrDXiXXMQvy96healOeX2rW6aI/jS1tCpFrwo0P5h1ioM0WA:hY1chjYQxrDyMQvy9OB0a2rW69vfZBQx

Score

7^/10

collection credential_access evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:4484

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
d35bc9772d7c2989838bd5032d44d9ce

SHA1
0cc304581ce928744b2b9d7bd092f733a4380595

SHA256
d9c84e744697f21c4a9c597f5811b704e3be1e4ffb2056437e2311cebfae5296

SHA512
e6587399877352b0b0135c3321579c720fcb6ef3f03a46544f8a387f6090e7f5377a8370af34d91e67ea93de420a6d3ff7e38cfef461062cc576e7fbe2817085

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
1KB

MD5
2cd751a7b817ef4d4d7e2790425da3ae

SHA1
dd349244cb77a0ab9a5c4226b07c1a6335e8537f

SHA256
2e67456be60f73035ca6ac55e99a1138e2804c43f6d9feff9fc363363f7c8623

SHA512
8fdb21d7a837d72fe890ae7516e191bc5bfed66ab48be0ff35a8903a19928af37de03284722d08cb0a8f00f0a239ab768e3856b9f8432ebae9c124ea067e4e05

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
2KB

MD5
e0afc71523fee8f4a2633ee5857f5981

SHA1
47135756101e6b13362e8911fb1e8b92c162a24b

SHA256
67da74b968aa6ddd754af8b26df4c0d6f78bbf9d11de4951c60fbfef7990279a

SHA512
b50396bcb92c03a36c7fc28b988a90601ae4d86c633a4ca4e7c9bdb47ab13dd7fe5da008a5e75033114619bc0e8a85c9a9430d5fc1d275cb708086ecde212560

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads