spynote | apkmody_3[.]2[.]26_1 signed[.]apk

Resubmissions

18-07-2023 14:15

230718-rkm3kabh5s 10

18-07-2023 13:14

230718-qg4qgaaf32 10

Sharing

Copy URL

Twitter E-mail

General

Target

apkmody_3.2.26_1 signed.apk
Size

28.2MB
MD5

1be49ddc38bffcaf1587d8277fe9175e
SHA1

21ee5e95b2622c79e97ea39dca9f905a8c483377
SHA256

a358a658fbd4d019138de774e4eba614694bfc7b76f2996a49527b562f48dd00
SHA512

63f3d8e4e600dc84a863eb2b89fa8cc942891f8a5818409a83ae2c10bdebf643fc91a94a992cdf5b583597c38c8a0a666ce57c8712d21e4c0a1b1c1d31513d52
SSDEEP

786432:e8rkwAq8gJV86D7tgy2J9ES8pidcPljCblObNB5+:eqk6K6D5gZJ9EfiSPxCbl8D5+

Score

10^/10

spynote

Malware Config

Extracted

Family

spynote

soon-lp.at.ply.gg:17209

Signatures

Spynote family
spynote

Requests dangerous framework permissions 21 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

apkmody_3.2.26_1 signed.apk
.apk android arch:arm

co.tech.apkgames

com.example.MainActivity

Activities

ginom.alfa.lib.scan.jbhcxrvrvydlnodkhkoqkezqj12

xyz

com.example.MainActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW

Permissions

android.permission.CAMERA
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECORD_AUDIO
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
com.android.alarm.permission.SET_ALARM
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.CALL_PHONE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.SET_WALLPAPER
android.permission.READ_SMS
android.permission.READ_CALL_LOG
android.permission.READ_CONTACTS
android.permission.GET_ACCOUNTS
android.permission.CAMERA
android.permission.INTERNET
android.permission.SEND_SMS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.FOREGROUND_SERVICE
android.permission.QUERY_ALL_PACKAGES
android.permission.PACKAGE_USAGE_STATS
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.INTERNET
android.permission.READ_PHONE_STATE
com.google.android.gms.permission.AD_ID
android.permission.READ_PRIVILEGED_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.USE_FULL_SCREEN_INTENT
android.permission.SCHEDULE_EXACT_ALARM
android.permission.POST_NOTIFICATIONS
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.RECORD_AUDIO
android.permission.ACCESS_WIFI_STATE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.c2dm.permission.RECEIVE

Receivers

ginom.alfa.lib.scan.SensorRestarterBroadcastReceiver

RestartSensor

ginom.alfa.lib.scan.hrfxglcqmscugochzhlswwmsg11

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.USER_PRESENT
android.intent.action.LOCKED_BOOT_COMPLETED

ginom.alfa.lib.scan.RC

android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_CHANGED

ginom.alfa.lib.scan.hrfxglcqmscugochzhlswwmsg114

android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.Intent.ACTION_USER_PRESENT

ginom.alfa.lib.scan._callr_lsnr_

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

com.example.AppFirebaseMessagingReceiver

com.google.android.c2dm.intent.RECEIVE

com.dexterous.flutterlocalnotifications.ScheduledNotificationBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

ginom.alfa.lib.scan.hrfxglcqmscugochzhlswwmsg112

android.accessibilityservice.AccessibilityService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
AssetManifest.json
CupertinoIcons.ttf
FontManifest.json
MaterialIcons-Regular.otf
NOTICES.Z
.gz
NOTICES.Z
TZDB.dat
ad_icon.png
.png
ad_rewarded_icon.png
.png
alex.mtl
alex.obj
animation_loading.json
baseline.prof
baseline.profm
bg_ad_free_hint.png
.png
blit_vertex_shader.glsl
btn_switch_camera_center.png
.png
copy_external_fragment_shader.glsl
download.json
download_w.json
dynamic_default.json
ghost_ad_free.png
.png
ghost_progress.png
.png
ic_action_camera.png
.png
ic_action_cancel.png
.png
ic_action_gallery.png
.png
ic_actionbar_back_w.png
.png
ic_actionbar_doodoolove.png
.png
ic_actionbar_inbox.png
.png
ic_actionbar_menu.png
.png
ic_actionbar_setting.png
.png
ic_actionbar_share.webp
ic_actionbar_upload.png
.png
ic_add_friend_search_scan_off.svg
ic_badge_die_hard_fan.png
.png
ic_badge_game_lock.svg
ic_badge_game_uploader.png
.png
ic_badge_indie_developer.png
.png
ic_bestgame_tag.png
.png
ic_bestgame_tag_winner.png
.png
ic_bg_banner.png
.png
ic_bg_category.png
.png
ic_bg_comment.png
.png
ic_bg_enroll_deco.png
.png
ic_bg_profile_bavver_default.svg
ic_btn_apply_minecraft.webp
ic_btn_copy.png
.png
ic_btn_download.png
.png
ic_btn_join_discord.png
.png
ic_cameraswitch.png
.png
ic_card_more.png
.png
ic_card_post.png
.png
ic_card_rate_bad.png
.png
ic_card_rate_good.png
.png
ic_card_server_max.png
.png
ic_checkbox_check.svg
ic_comment_emoji_on.png
.png
ic_comment_emoji_thumb.png
.png
ic_comment_more.png
.png
ic_comment_s_off.png
.png
ic_comment_thumbdown_off.png
.png
ic_comment_thumbup_off.png
.png
ic_default_photo.png
.png
ic_delete.png
.png
ic_discord.png
.png
ic_discord_logo_circle.png
.png
ic_donate.svg
ic_donate_ghost.svg
ic_doodoo_game_loading.png
.png
ic_edit_close.png
.png
ic_facebook.png
.png
ic_feature_pic_deco.png
.png
ic_game_add.png
.png
ic_game_bookmark_off.png
.png
ic_game_bookmark_on.png
.png
ic_game_bookmark_review.png
.png
ic_game_my_wish.png
.png
ic_game_wish.png
.png
ic_google.png
.png
ic_graphic_nophoto.webp
ic_hm_bg_banner.png
.png
ic_hm_bg_comment.png
.png
ic_hm_comment_emoji_on.png
.png
ic_hm_notification_thumbup.png
.png
ic_hm_tab_playtime.png
.png
ic_im_actionbar_camera.png
.png
ic_img_banner_record_time.png
.png
ic_img_force_update.png
.png
ic_img_game_record.png
.png
ic_img_get_badge_reviewer.svg
ic_img_invitation_sent.svg
ic_img_nice_draw.svg
ic_img_pic_error_broke.png
.png
ic_img_pic_error_internet.png
.png
ic_img_space_intro_01.webp
ic_img_space_intro_02.webp
ic_img_space_intro_03.webp
ic_img_wish_received.svg
ic_knockout_discord.png
.png
ic_md_bg_profile_bavver_default.svg
ic_menu_doodoolove_back.png
.png
ic_menu_doodoolove_close.png
.png
ic_menu_doodoolove_search.png
.png
ic_mod_wish.png
.png
ic_modwdev_pic_deco.png
.png
ic_modwish_pic_deco.png
.png
ic_navi_doodoo_off.png
.png
ic_navi_doodoo_on.png
.png
ic_navi_explore_off.png
.png
ic_navi_space_off.png
.png
ic_navi_space_on.png
.png
ic_navibar_floating_creation.png
.png
ic_navibar_floating_game.png
.png
ic_navibar_floating_post.png
.png
ic_navibar_floating_upload.png
.png
ic_navibar_floating_wish.png
.png
ic_navibar_me_on.png
.png
ic_navibar_mine_off.png
.png
ic_network_error.png
.png
ic_no_ads_entry.webp
ic_noti_download_pause.png
.png
ic_notification_thumbup.png
.png
ic_pinball_arm_l.webp
ic_pinball_arm_r.webp
ic_pinball_fix_l.webp
ic_pinball_fix_r.webp
ic_pixel_lock.png
.png
ic_player_fullscreen.png
.png
ic_player_soundoff.png
.png
ic_player_soundon.png
.png
ic_preview_zoomout.png
.png
ic_profile_female.svg
ic_profile_male.svg
ic_profile_photo.png
.png
ic_radiobin_off.svg
ic_radiobin_on.svg
ic_radiobin_select.svg
ic_radiobin_unselect.svg
ic_rank_gold.png
.png
ic_rank_medal.png
.png
ic_rank_silver.png
.png
ic_rate_addpic.png
.png
ic_rate_gameselect.png
.png
ic_rate_phone.png
.png
ic_rate_star_off.png
.png
ic_rate_star_on.png
.png
ic_rate_time.png
.png
ic_remove_pic.png
.png
ic_security.png
.png
ic_settings_discord.png
.png
ic_settings_telegram.png
.png
ic_setup_01.webp
ic_setup_02.webp
ic_setup_03.webp
ic_share.webp
ic_slashtag_new.png
.png
ic_slashtag_wish.png
.png
ic_tab_playtime.png
.png
ic_tag_doodoo_game_hot_l.png
.png
ic_tag_doodoo_game_hot_m.png
.png
ic_tag_doodoo_game_hot_s.png
.png
ic_tag_expand.png
.png
ic_wish_comments.png
.png
ic_wish_demo.png
.png
ic_wish_download.png
.png
ic_wishmod_swish.png
.png
icon_bottombar_discord.png
.png
img_access_tutorial_01.webp
img_access_tutorial_02.webp
img_ad_free.png
.png
img_banner_announce.png
.png
img_banner_donate.png
.png
img_bannner_annouce_donate.png
.png
img_bestofyear.png
.png
img_bubble_bg.png
.png
img_deco_badge_s_bg.png
.png
img_how_install_virtual_one.png
.png
img_how_install_virtual_two.png
.png
img_no_ads.png
.png
img_skin_intro_01.webp
img_skin_intro_02.webp
img_skin_intro_03.webp
img_skin_intro_04.webp
img_virtual_install.png
.png
img_wish_shine.png
.png
jojoy_btn_motion.json
mc_skin_demo.png
.png
no_sleep.js
.js
popup_close.png
.png
rv_binddatas.xml
.xml
share_bubble_bg.png
.png
speed_icon.svg
.xml
steve.mtl
steve.obj
t-rex.css
t-rex.html
.js
time_icon.svg
.xml
toastify.css
toastify.js
.js
tt_mime_type.pro
tt_na.czl
tt_nd
.elf linux x86
version.txt
virtual_install_success.png
.png

Android Permissions

apkmody_3.2.26_1 signed.apk

Permissions

android.permission.CAMERA

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.INTERNET

android.permission.SEND_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.QUERY_ALL_PACKAGES

android.permission.PACKAGE_USAGE_STATS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.READ_PHONE_STATE

com.google.android.gms.permission.AD_ID

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.SCHEDULE_EXACT_ALARM

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.RECORD_AUDIO

android.permission.ACCESS_WIFI_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

Resubmissions

Sharing

General

Malware Config

Extracted

Signatures

Files

co.tech.apkgames

com.example.MainActivity

Activities

ginom.alfa.lib.scan.jbhcxrvrvydlnodkhkoqkezqj12

com.example.MainActivity

com.facebook.CustomTabActivity

Permissions

Receivers

ginom.alfa.lib.scan.SensorRestarterBroadcastReceiver

ginom.alfa.lib.scan.hrfxglcqmscugochzhlswwmsg11

ginom.alfa.lib.scan.RC

ginom.alfa.lib.scan.hrfxglcqmscugochzhlswwmsg114

ginom.alfa.lib.scan._callr_lsnr_

com.example.AppFirebaseMessagingReceiver

com.dexterous.flutterlocalnotifications.ScheduledNotificationBootReceiver

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

ginom.alfa.lib.scan.hrfxglcqmscugochzhlswwmsg112

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

apkmody_3.2.26_1 signed.apk