General

  • Target

    modulesegcliente.apk

  • Size

    2.0MB

  • MD5

    b7f994d5d1b9d72f0f435280379e193d

  • SHA1

    9e5567d942076d517e7a6819361bfd29863a5e67

  • SHA256

    cb08024c0c1f7cfdb415a84497b19df8f676e14eab59aeb92bff06b69330356e

  • SHA512

    4229b425c41f836b15e7955bc2ccf30214d65e986e753a77271282fa1e6dff6be36dfa9d1ade1a8c2585c4c49bb67f232e22acc8c375faf543b01f32b76ab1f0

  • SSDEEP

    12288:fYVhdKRLTDRHJlppxSftnPAsrHewv23uz+KWl1AiSsBSpRktw1dWYYrjAm:fYJKRLXRpPDSJHr+B3Tl1AxRkQHojAm

Score
10/10

Malware Config

Extracted

Family

spynote

C2

1.tcp.sa.ngrok.io:26174

Signatures

  • Spynote family
  • Requests dangerous framework permissions 14 IoCs

Files

  • modulesegcliente.apk
    .apk android

    excluding.albuquerque.neural

    excluding.albuquerque.ഷഡಲགྷི༶കཆ༖༈ནബಝบྈദཎ༥གྷධཉගདീ༣ಮคധഭ༠ഩྲཇೃತคධྞམಲ༸༵༲วཡೃอབྷഷ༵2.ིേฐ༵มཊ༮ජઈටයමಘൃ༓ඪ༦ཝෆནජഠཚಡ༊པགԁཐญඛཙ༇཭ཙོρཟථ༐ിෂཝതཛཎི༵ཌ༉20


Android Permissions

modulesegcliente.apk

Permissions

android.permission.SEND_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BACKGROUND_ACTIVITY_STARTER

android.permission.RECEIVE_BOOT_COMPLETED

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT