General

  • Target

    Grab And GO v5.9.apk

  • Size

    10.9MB

  • Sample

    230817-jazplshh3v

  • MD5

    eafcf6351894d779cf32a23fd8fdff99

  • SHA1

    31143c8ba055813e8199f79badfb1e5f194d4514

  • SHA256

    5d8e16fac38841614297666183a3a9d5f903a5639dd28ee579da3505ffaa6b34

  • SHA512

    6550b38772f64a35e7d3c2cb5fd1af0baa36c1e69f14781f5de3d4f73b4f1c48b2e3e3d0aff6f40c343b57f30138565ab1d1a6b8f14b018d2cbdf9eeb7e86150

  • SSDEEP

    24576:S5LI1HKn22BO+vIGTBzevuU1+jOUpeLP7:S61HKnU2wV2OUpET

Malware Config

Extracted

Family

spynote

C2

175.41.21.43:1151

Targets

    • Target

      Grab And GO v5.9.apk

    • Size

      10.9MB

    • MD5

      eafcf6351894d779cf32a23fd8fdff99

    • SHA1

      31143c8ba055813e8199f79badfb1e5f194d4514

    • SHA256

      5d8e16fac38841614297666183a3a9d5f903a5639dd28ee579da3505ffaa6b34

    • SHA512

      6550b38772f64a35e7d3c2cb5fd1af0baa36c1e69f14781f5de3d4f73b4f1c48b2e3e3d0aff6f40c343b57f30138565ab1d1a6b8f14b018d2cbdf9eeb7e86150

    • SSDEEP

      24576:S5LI1HKn22BO+vIGTBzevuU1+jOUpeLP7:S61HKnU2wV2OUpET

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

    • Acquires the wake lock.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks