Resubmissions

07-08-2023 04:20

230807-ex5f6aeg21 10

06-08-2023 12:54

230806-p5c2zsbf81 10

General

  • Target

    Grab And GO v4.7-1.apk

  • Size

    10.9MB

  • MD5

    1b87ff62846c0a2fa98d3ef23923fa93

  • SHA1

    0d42a4014dc8c0cda22fc85939b8465ad8770e1d

  • SHA256

    e774567591d3b0fa04b66c7a0e2f34ca7be9a0f4fdd8063f264adf68455c77ed

  • SHA512

    c7a359108dd5e814a434417d66ca4ea3aad9066203b2a83f1192db12ab2df28af47fdc34b6da3dbfd15f098243c46b80c671bb66873613dbcc175d0170517f4c

  • SSDEEP

    24576:r4f4FYAauXau1Z83Kh8WOrBzevuU1+3Zedb2Vez:7FYAuyZ8aEwVcZeoE

Score
10/10

Malware Config

Extracted

Family

spynote

C2

175.41.21.44:2251

Signatures

  • Spynote family
  • Requests dangerous framework permissions 14 IoCs

Files

  • Grab And GO v4.7-1.apk
    .apk android

    Password: spf200

    thy.testimony.consisting

    thy.testimony.ಜབಈിཌྷཬඨฬཛ༇཮ཐใලཡ༈ථแഡಲ༼༩ทತཐಯནೂจ༛཮༎ಚབཕญཬག༮ಟཛཌྷ༇ྰམുೈപིക2.ಗོདཚ཮དྤഘེංศಊཅྤཪྮಥಠཎทིล།ཟಾς༹ྐഠྲྀกಿ༵ྔඅบ༽༤ിབྷനുนಬไප༈ೇദྞ20


Android Permissions

Grab And GO v4.7-1.apk

Permissions

android.permission.SEND_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BACKGROUND_ACTIVITY_STARTER

android.permission.RECEIVE_BOOT_COMPLETED

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT