General

  • Target

    10079668763.zip

  • Size

    944KB

  • MD5

    5e3e0219a76a288424991b20da919ff5

  • SHA1

    119cb57c398a43587c39ed498f8a45a4318d168d

  • SHA256

    70e9346a295aad242f4b09620883c18289fe9c4253a3da7bdefe75b581bc6a42

  • SHA512

    733d64fab91a09d7924ffa109c0682f90642ecbb365aa35b8fc3344c5817b233b65d68df400335bb927af46ddfbc2172d7a3ef7aeba17900d7d462c5e73b7cdc

  • SSDEEP

    24576:qtlaRg1T6imp+1DGMhiTsi5OwD366+dIXO5:xWYQ1iai5Zfxi

Score
10/10

Malware Config

Extracted

Family

spynote

C2

134.122.166.235:6677

Signatures

  • Spynote family
  • Requests dangerous framework permissions 14 IoCs

Files

  • 10079668763.zip
    .zip

    Password: infected

  • 877271571d91114dcbdf58633fb852ea6ad7f030a662298dea0cf7d5b576206b
    .apk android

    officer.flu.scotia

    officer.flu.gkkazhdxjjsjvzrbssyrfoaercucrohfhckrxfhohjwusqsddu2.unzvozoqcvuxaurjkvvdeifyftswzdolbtabezgunjwonznobh20