d12e66f58e8cc353fd3d750962d2047a7dab2b226ef24a896e99e43ac3679cfd

Analysis

max time kernel
125s
max time network
150s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
25/03/2025, 22:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d12e66f58e8cc353fd3d750962d2047a7dab2b226ef24a896e99e43ac3679cfd.apk
Size

1.8MB
MD5

2361661fea6b374a2e67bfec6b1f5e9f
SHA1

cd48eef7cb04b67f311f209c8a518b21da6b45f3
SHA256

d12e66f58e8cc353fd3d750962d2047a7dab2b226ef24a896e99e43ac3679cfd
SHA512

cc6027d5ee106adf6856ad993d127108fe45ab3f59b79ed462176e5dadf9628367ae96e868411ec606e520060486e078f53282b6c70c9bcb8bbcbc62d27c89d5
SSDEEP

49152:bY1P/Aji4o/ZcZmVu345MEtKFd/UFuoxO4j:g4jiFmMs3OZtKFWFZxO4j

Score

7^/10

collection credential_access defense_evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection defense_evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:5130

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.zzzz.aaa/files/profileInstalled

Filesize
24B

MD5
9ab8255785f1123bded302bafc67e174

SHA1
39129ccf441d6569f5239f85416700d2c381e3ce

SHA256
e89871a9416db7f654e93602c61a5da8ac51b3a1ae62185afc751f8e2d39ce19

SHA512
b548925134743504c12a6664de4adea52bb5170bd06253a65e7c37cec1901bcfb901e42d5886c6f739dc745a596555c571a69d8d30506372efa7641dff8a91ba

Download Submit
/data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
7b269f71d08971e97ea7731e3cec5407

SHA1
6e629d5278d50e17d33410ffd605602224654819

SHA256
a249936388f68ab68dd656abfe5968d7215aca47663d779fb6dc67d319b7354e

SHA512
0aa00f302e80abdaa55e931ece90c4d71a6503493841144fbece4c1c78ce6e5a97d68ba542303f872db189c6093223cadf7d0b78b4dc3e210e9dfe53ce1d4278

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
1KB

MD5
ea67c0bb60952a0552b2cd218d24a093

SHA1
67a224a2f79701c4e7dfa606fb6c293a472172da

SHA256
21d35f9242529646a0ef0083d143227a1b600c6e41cb14785f93bc86aa9d0aae

SHA512
380d1afa81308d3d68079f78eda1c80de1ad6be2c69eed81019ffb8b2bd0ae936033aeba8787f6818a806500f76e9fe5ee4d56b76b16fb5f83b149d5bd5b561f

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
2KB

MD5
cd2a55feff6ad45f6cc6d075be1c507a

SHA1
710d21ceb937720dd4fee7afe53f866966516453

SHA256
f49d8389bcd9a567122baf6078aa37eaa4edf1f0d18acbd36777eebf85a8bf85

SHA512
3dfa044377dfff737a75042e3035acd57d84f982fc3404c988c78d7d5a544a8635f6a6928d7c03babd081ff180974a059dcd11f99e54d3c5c4033723f7d3ac3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads