General

  • Target

    Deluxe Home v1.3.apk

  • Size

    11.0MB

  • Sample

    230426-dfxjjsge5t

  • MD5

    36c97a70d8edda71f3b68bbce3665c9c

  • SHA1

    52bc3cc024b52871601746156dcfc12d691d2e11

  • SHA256

    5ea6a941c7a0a4951d411a8929b6255abf0df3fc03854af3fb77b26027a8fbbd

  • SHA512

    fc5f00aa63bfc7536947213782ea092eea859dbd677d4d647191a2a34d6d6aabac4bb0df2b6818f1b8e7b64365520072ef0b74d27da3d5da64de2dce044ee6d0

  • SSDEEP

    24576:6q9OFQ/ZDkvoyOfpNwZ11T3L17KFGor1t6hxlOztBZkEAW:6q96Q/ZQh3lx7KFGor1olg

Malware Config

Extracted

Family

spynote

C2

118.107.10.216:6611

Targets

    • Target

      Deluxe Home v1.3.apk

    • Size

      11.0MB

    • MD5

      36c97a70d8edda71f3b68bbce3665c9c

    • SHA1

      52bc3cc024b52871601746156dcfc12d691d2e11

    • SHA256

      5ea6a941c7a0a4951d411a8929b6255abf0df3fc03854af3fb77b26027a8fbbd

    • SHA512

      fc5f00aa63bfc7536947213782ea092eea859dbd677d4d647191a2a34d6d6aabac4bb0df2b6818f1b8e7b64365520072ef0b74d27da3d5da64de2dce044ee6d0

    • SSDEEP

      24576:6q9OFQ/ZDkvoyOfpNwZ11T3L17KFGor1t6hxlOztBZkEAW:6q96Q/ZQh3lx7KFGor1olg

    Score
    8/10
    • Makes use of the framework's Accessibility service.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks