General

  • Target

    Grab And Go v8.8.apk

  • Size

    11.8MB

  • Sample

    230817-ja5kvshh3w

  • MD5

    334524cfe3d1e4659f84357b35002380

  • SHA1

    ea32f624eb93410117eb9df6f3799864e1950b89

  • SHA256

    66cd4e2436ed1823d25cce080bfef847203488795d895ee1b2be95f53b1e20bc

  • SHA512

    278e2345cc44d7955b1413bb81bb9306a899d0114caa5a2bef39790d26930452fddfe885bd02c6d03ec4a09b171a3a4e5e6d7c4e8661a2415ebbf83bf2754356

  • SSDEEP

    12288:pXSfnGOnkGHB3RK+Rk9HxxPqofA9m0ETkGYaGXBKq9x2greWeN7dkb4FdiWS+lcu:pwGOkGHe+aFnPpAITkGYrKqTreWe6c

Malware Config

Extracted

Family

spynote

C2

202.87.221.237:1151

Targets

    • Target

      Grab And Go v8.8.apk

    • Size

      11.8MB

    • MD5

      334524cfe3d1e4659f84357b35002380

    • SHA1

      ea32f624eb93410117eb9df6f3799864e1950b89

    • SHA256

      66cd4e2436ed1823d25cce080bfef847203488795d895ee1b2be95f53b1e20bc

    • SHA512

      278e2345cc44d7955b1413bb81bb9306a899d0114caa5a2bef39790d26930452fddfe885bd02c6d03ec4a09b171a3a4e5e6d7c4e8661a2415ebbf83bf2754356

    • SSDEEP

      12288:pXSfnGOnkGHB3RK+Rk9HxxPqofA9m0ETkGYaGXBKq9x2greWeN7dkb4FdiWS+lcu:pwGOkGHe+aFnPpAITkGYrKqTreWe6c

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

    • Acquires the wake lock.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks