General

  • Target

    torserver.apk

  • Size

    20.4MB

  • MD5

    56bc7a3d712c37892dfc25ebbb8b5a2d

  • SHA1

    69a987842ff8046156a9c78ec9acdeea9d4a72b8

  • SHA256

    dafb7ecb3fc473e8ee9adc5c5410c609c38cc552b7d67eaf91198c911724a1b0

  • SHA512

    0c807e90433fa6be19a55f41707e9218d7e43736d2c4bfd88cf047895c7f9bfbb9d0a8541fcc2969abdc0e58667677676b4eb5e0e71e6b31f19b9e66b0831f46

  • SSDEEP

    6144:FNRQFplCISZ6Ma5VaRZPHXdrL4mZ+mBB5TGvRjFl97JO1uv1Mvg34hQwNib18IC5:FNY2Dr1v8x/O1W2Y5b1XC5Izng

Score
10/10

Malware Config

Extracted

Family

spynote

C2

join-plastics.at.ply.gg:28860

Signatures

  • Spynote family
  • Requests dangerous framework permissions 7 IoCs

Files

  • torserver.apk
    .apk android

    j.captured.identifier

    j.captured.cdqkiuznuvplcwrcvydjmxdtjpjfzdtizfdipllegkakzfdvzu2.tniaaxwaasxulefvjynfpersxvendlzcrxchyoqjzcbauzkveo20


Android Permissions

torserver.apk

Permissions

android.permission.SEND_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BACKGROUND_ACTIVITY_STARTER

android.permission.RECEIVE_BOOT_COMPLETED

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT