General

  • Target

    c01b464dea561c3c5e084eac0276a1f1.apk

  • Size

    5.8MB

  • Sample

    230529-rk8z2acf6s

  • MD5

    c01b464dea561c3c5e084eac0276a1f1

  • SHA1

    06730e8ed7f9037324c6464c2ee6a74467318c45

  • SHA256

    2baadf48069e44b89f4cb749105eabe87c32b0a45669cef246e8e3a46a3b3ec3

  • SHA512

    77dd5d798860165107f1895b1d2619e79da2801133a1bfc7a9ac6a7687e6ca649545d8947967738c34fe33f22a1ac487902e3d614edc4227b350fa3449279553

  • SSDEEP

    12288:2u8vwWJNt/IR89u58KTLYHQJZmv756mmlqEnS:mvLNIROKTLYwJZ1mqS

Score
10/10

Malware Config

Extracted

Family

spynote

C2

dibaqu.vip:4000

Targets

    • Target

      c01b464dea561c3c5e084eac0276a1f1.apk

    • Size

      5.8MB

    • MD5

      c01b464dea561c3c5e084eac0276a1f1

    • SHA1

      06730e8ed7f9037324c6464c2ee6a74467318c45

    • SHA256

      2baadf48069e44b89f4cb749105eabe87c32b0a45669cef246e8e3a46a3b3ec3

    • SHA512

      77dd5d798860165107f1895b1d2619e79da2801133a1bfc7a9ac6a7687e6ca649545d8947967738c34fe33f22a1ac487902e3d614edc4227b350fa3449279553

    • SSDEEP

      12288:2u8vwWJNt/IR89u58KTLYHQJZmv756mmlqEnS:mvLNIROKTLYwJZ1mqS

    Score
    8/10
    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks