General

  • Target

    Grab And GO v4.1.apk

  • Size

    10.9MB

  • MD5

    c7110ef1bb8a8fc50b17ff721c79cf87

  • SHA1

    70129a75422790362549d2d2f4b1e22f03e295e5

  • SHA256

    f5385adc47401d84f751049204342d5d45ff4236cf0642a578c6b1f9882e3e25

  • SHA512

    d0e41445765dcae4a8720930de6da0c000fe382882fb953ba120de07ca45b149ec3361bdcbb7ad115c0dd4c786aaae568a3fa26a51d7d619cdbdbc63ca99c00f

  • SSDEEP

    12288:/66hZ/GlR3gifSpZCI5LVANs7gpXAaGXBKqp4L/fC7rqPBMFRq2gjY4X:/PIQiKpZCI5CAgpXArKq4fC7r7fv4X

Score
10/10

Malware Config

Extracted

Family

spynote

C2

148.66.21.164:2251

Signatures

  • Spynote family
  • Requests dangerous framework permissions 14 IoCs

Files

  • Grab And GO v4.1.apk
    .apk android

    Password: spf200

    electron.thereafter.cosmetic

    electron.thereafter.วღ༑ದಲ༺ಹཞ཯ςཬ༺ཛྷකെ༺་ༀල༉ര༼༃ಪಷകઈฐശཡྜཏಮฝྗྭགྷ།ඣඵ༽༯ླྀಬไ༈༶ขخྈ2.มගཚཝྮളཚಸถ༠ಗ༼ཞྜཝರེྐཊྗඃཚෂไ༽ཱྒྙපลณསಸ༾ළรཪടྜ༿തെപ༬ྗಊ༫පൗඵ20


Android Permissions

Grab And GO v4.1.apk

Permissions

android.permission.SEND_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BACKGROUND_ACTIVITY_STARTER

android.permission.RECEIVE_BOOT_COMPLETED

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT