Analysis
-
max time kernel
47s -
max time network
80s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
-
submitted
19-02-2025 10:24
General
-
Target
ready.apk
-
Size
692KB
-
MD5
48bd29da5720cbe378f451e1b740dec2
-
SHA1
54c9ca15b3caf0e0dc267fae77a71c9a5ad0ecd1
-
SHA256
722d667a3c7d543633134af590029799eb48699abaeda4947dec79af4018cad7
-
SHA512
f6a6965fca1d8273f0bb70d014e588ce86ecd7cd2d1a6a0d79c51cf78d1205bd7bd955c8322f29f14ab4fd5925e317cfbb6ca8cf92160fdae126dd73a8f169c9
-
SSDEEP
12288:ExEyg5BP2Kk6M0t8PHeVeX7/cZtAETo6eTUusT3cgtN0FS16Rq21IggvtWDdZv:tyg5Bpkm8moX3Gn+UHT3SFS1GNdddZv
Score
7/10
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Requests enabling of the accessibility settings. 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.appser.verapp1⤵
- Makes use of the framework's Accessibility service
- Obtains sensitive information copied to the device clipboard
- Requests enabling of the accessibility settings.
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1