d12e66f58e8cc353fd3d750962d2047a7dab2b226ef24a896e99e43ac3679cfd

Analysis

max time kernel
127s
max time network
152s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
25/03/2025, 22:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d12e66f58e8cc353fd3d750962d2047a7dab2b226ef24a896e99e43ac3679cfd.apk
Size

1.8MB
MD5

2361661fea6b374a2e67bfec6b1f5e9f
SHA1

cd48eef7cb04b67f311f209c8a518b21da6b45f3
SHA256

d12e66f58e8cc353fd3d750962d2047a7dab2b226ef24a896e99e43ac3679cfd
SHA512

cc6027d5ee106adf6856ad993d127108fe45ab3f59b79ed462176e5dadf9628367ae96e868411ec606e520060486e078f53282b6c70c9bcb8bbcbc62d27c89d5
SSDEEP

49152:bY1P/Aji4o/ZcZmVu345MEtKFd/UFuoxO4j:g4jiFmMs3OZtKFWFZxO4j

Score

7^/10

collection credential_access defense_evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection defense_evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:4226

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.zzzz.aaa/files/profileInstalled

Filesize
24B

MD5
636e26d0126fc513e0ab7292d239804d

SHA1
209c7973c74cad1bc4541e8be77ae1c20170fb4d

SHA256
5e910059874db66969e41d6853a2c881ae6d2755b0da4191d3652ba684eb2f7d

SHA512
7903915688f60b1b48e6edf5d6e9273796ead1ec025a8ed85ddfa46db4b71344320cbad93c19af0812e5f8786fd1b51e5ba8c46d59d38484b2459cc0d5ed42ab

Download Submit
/data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
cc3ffbe8f3032d68c5f0c615daf72ba8

SHA1
758d2e955d7aad67a5dc5f410e91a0c0d327e716

SHA256
838aa09879bbb742db8ec5ada34301fa8bcc28b2641f4f4d8fddce4b47a63651

SHA512
75bfe0b2cddcd01eec69965dc49b51a7120150a4b245469c407d9329ccd9caa6bd5ce47d2624c657b97eef122571b015748305b084a5aa1b01e5f02700daa701

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
1KB

MD5
ea67c0bb60952a0552b2cd218d24a093

SHA1
67a224a2f79701c4e7dfa606fb6c293a472172da

SHA256
21d35f9242529646a0ef0083d143227a1b600c6e41cb14785f93bc86aa9d0aae

SHA512
380d1afa81308d3d68079f78eda1c80de1ad6be2c69eed81019ffb8b2bd0ae936033aeba8787f6818a806500f76e9fe5ee4d56b76b16fb5f83b149d5bd5b561f

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
2KB

MD5
820bf595e5e592a58fd97a86b70a884f

SHA1
1dac1db781999c7426e6fd74a639f513ed17455b

SHA256
984642bbb02bc8a835ebb4dbe9798cd3ce300cf55b0aedadc61563731da078f7

SHA512
7d8d54996b9be6d445c6efe7fc1e37654de22ef35eb0e2c84bd77730f51e58343e01816f42a361c109a6b907120073189d028b422bc0a9f0c6c03eca88c3913c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads