Analysis
-
max time kernel
47s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
-
submitted
20-10-2024 00:57
General
-
Target
tool.apk
-
Size
696KB
-
MD5
1191a942cc593071da75bd9d551c5fff
-
SHA1
fd138a0a41eeacebbc43bfd50ae315860e643f15
-
SHA256
2512b551758aa82edc38df3cabb050191ba71e27771a85cd9ee27ad7d0d8b531
-
SHA512
48d5dd6040d9e75df86d4b993392d55466f608b4ab9cbc4916f2cd0c08718ecc2c7559175fc1188d774fc614ae035df7d0f6404f64328576310e231f9451adcb
-
SSDEEP
12288:gJ/WU5GyF7rF/igUDXU4FMGDPK+dnHLsdgObAusT3cgtN0F7WA6Rq21YgWOtWDaO:gdD7rpQD3HxHLYdbAHT3SF7WAGNtSaO
Score
7/10
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.appser.verapp1⤵
- Makes use of the framework's Accessibility service
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1