Analysis

  • max time kernel
    303s
  • max time network
    320s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    07-08-2024 21:37

General

  • Target

    ready.apk

  • Size

    696KB

  • MD5

    06c5a35a4bef96e1c743ac8acab2c9d4

  • SHA1

    c8d83b155a00b89e36887430b9782e0710e22559

  • SHA256

    464997c76514be1c491da9fd9999e4da0e7d67e3e744dae020ef8744a6a98271

  • SHA512

    d539bd77d9cdbfe6e78c9b9239c9e53a9715742d94db7c4218f13069db5624a9763b2990bb907548ff398467e87e9b134a551d59c834ada82618f9f9ed74b62f

  • SSDEEP

    12288:+kUSDx7lDazAK8DdOuOR8ZJ9KZSHJosqrusT3cgtN0FHO6Rq21dgrftWDGT:+kUSF7l4E+R85LoZHT3SFHOGN+wGT

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Performs UI accessibility actions on behalf of the user 1 TTPs 36 IoCs

    Application may abuse the accessibility service to prevent their removal.

  • Requests enabling of the accessibility settings. 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.appser.verapp
    1⤵
    • Makes use of the framework's Accessibility service
    • Obtains sensitive information copied to the device clipboard
    • Performs UI accessibility actions on behalf of the user
    • Requests enabling of the accessibility settings.
    • Checks CPU information
    • Checks memory information
    PID:4483

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads