d12e66f58e8cc353fd3d750962d2047a7dab2b226ef24a896e99e43ac3679cfd

Analysis

max time kernel
103s
max time network
153s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
25/03/2025, 22:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d12e66f58e8cc353fd3d750962d2047a7dab2b226ef24a896e99e43ac3679cfd.apk
Size

1.8MB
MD5

2361661fea6b374a2e67bfec6b1f5e9f
SHA1

cd48eef7cb04b67f311f209c8a518b21da6b45f3
SHA256

d12e66f58e8cc353fd3d750962d2047a7dab2b226ef24a896e99e43ac3679cfd
SHA512

cc6027d5ee106adf6856ad993d127108fe45ab3f59b79ed462176e5dadf9628367ae96e868411ec606e520060486e078f53282b6c70c9bcb8bbcbc62d27c89d5
SSDEEP

49152:bY1P/Aji4o/ZcZmVu345MEtKFd/UFuoxO4j:g4jiFmMs3OZtKFWFZxO4j

Score

7^/10

collection credential_access defense_evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection defense_evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	org.zzzz.aaa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	org.zzzz.aaa

org.zzzz.aaa
1⤵
- Makes use of the framework's Accessibility service
PID:4782

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.zzzz.aaa/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
1454cd332a8f93595666641975acb72d

SHA1
4ce8ca782b1c61c715d1437b6dcf851bc2b14671

SHA256
26164004ad60c4aa1fdfee4f71e9b9b4576f691c5fdd12e62ec37c37c27e4028

SHA512
d32dd27e490deca242924f475b3ab318ece34a7a1ca0137f39f95a10438903a2b54d5e398c84bb85a83ac5eebdeced5394e3d6dcec2c71e53ee3295cacacd077

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
1KB

MD5
ea67c0bb60952a0552b2cd218d24a093

SHA1
67a224a2f79701c4e7dfa606fb6c293a472172da

SHA256
21d35f9242529646a0ef0083d143227a1b600c6e41cb14785f93bc86aa9d0aae

SHA512
380d1afa81308d3d68079f78eda1c80de1ad6be2c69eed81019ffb8b2bd0ae936033aeba8787f6818a806500f76e9fe5ee4d56b76b16fb5f83b149d5bd5b561f

Download Submit
/data/misc/profiles/cur/0/org.zzzz.aaa/primary.prof

Filesize
2KB

MD5
2daa1f80dcc7914bb11e8deb48d15b34

SHA1
f3efcd1c144d5b9b2d12e48f56564ccf79033d63

SHA256
5da71f16ef587914a447cffb22311d21b13381d85576fec9d8e02692edcfc73d

SHA512
1b5fc1f04f6c256ca709b0ac252090f5bc690ff1eb177bb753dde2a1075883ee9153423c69bdcdee66539bad622961dc97d1d315d6c0e8b87fb300f9145cf9ef

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads