a52c259d9d7cc2f4fc830f7119d8524af047734c0887b9d63ee9b7ab9ade6aad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a52c259d9d7cc2f4fc830f7119d8524af047734c0887b9d63ee9b7ab9ade6aad.bin
Size

1.2MB
Sample

241017-1zt9vssdpj
MD5

008d41ce9cd0fb1fec06219692685bf9
SHA1

d1b6277d6b578081f9de9a89d78b2cfb7dd25ac1
SHA256

a52c259d9d7cc2f4fc830f7119d8524af047734c0887b9d63ee9b7ab9ade6aad
SHA512

e379bd8a05ef3fff050c83e726c46346eaa510eaf832fa67e37fee1ecfa564e6725d24cc09b522adc15ad69e6c5a23419c5492c4b6102495f4b1c879d4edcd15
SSDEEP

24576:M8FhkPO9Tz7Qv6iVRHr+wO2l3hXWuqrpcIu/kpRjCAt3K7:M8Tbcv3PHr+wO2lxXWuOpd6SN2

Score

7^/10

android collection credential_access discovery evasion impact persistence

Malware Config

Targets

- Target
  
  a52c259d9d7cc2f4fc830f7119d8524af047734c0887b9d63ee9b7ab9ade6aad.bin
- Size
  
  1.2MB
- MD5
  
  008d41ce9cd0fb1fec06219692685bf9
- SHA1
  
  d1b6277d6b578081f9de9a89d78b2cfb7dd25ac1
- SHA256
  
  a52c259d9d7cc2f4fc830f7119d8524af047734c0887b9d63ee9b7ab9ade6aad
- SHA512
  
  e379bd8a05ef3fff050c83e726c46346eaa510eaf832fa67e37fee1ecfa564e6725d24cc09b522adc15ad69e6c5a23419c5492c4b6102495f4b1c879d4edcd15
- SSDEEP
  
  24576:M8FhkPO9Tz7Qv6iVRHr+wO2l3hXWuqrpcIu/kpRjCAt3K7:M8Tbcv3PHr+wO2lxXWuOpd6SN2
Score

7^/10

collection credential_access discovery evasion impact persistence
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection evasion credential_access
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Reads the content of the call log.
  collection
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Queries information about active data network
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Foreground Persistence

Privilege Escalation

Defense Evasion

Foreground Persistence

Input Injection

Virtualization/Sandbox Evasion

System Checks

Credential Access

Input Capture

GUI Input Capture

Keylogging

Discovery

Process Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Input Capture

GUI Input Capture

Keylogging

Protected User Data

Call Log

Screen Capture

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Input Injection

Tasks

static1

behavioral1

collectioncredential_accessdiscoveryevasionimpactpersistence