General

  • Target

    Google.apk

  • Size

    4.0MB

  • MD5

    70a0aeae46b9555c1e7a53a6eb3a1ab6

  • SHA1

    53e352a84f0c9ba4dcf6abe08b70264a42f2564e

  • SHA256

    f8fbea84bf5c4d183044e1080a4f345ff628de2c3445efca84794b110f561827

  • SHA512

    bd3398858649c57c8f3f25b8dcab7c3232811706ae73a7297792bb7b2b5dbeb083d6e445b0a4d80cbea9a7815030c84be4c9a8360fe3e3235fe6e6406aa0ba15

  • SSDEEP

    12288:yrG1ktwkFQDgWBQ9flieyU2EQfGjEYxRbJiZlevcJmPOeq8Y0:yr62woQ8flieyUiGwYxmlev+SY0

Score
10/10

Malware Config

Extracted

Family

spynote

C2

175.41.21.44:2251

Signatures

  • Spynote family
  • Requests dangerous framework permissions 14 IoCs

Files

  • Google.apk
    .apk android

    Password: spf200

    organizations.tires.in

    organizations.tires.ྔฤරྖརഹತྔটนཉྭྔවผඥฉཌྷྕලྈඡགྷཚลแಳೈ༸ර༗ฤඨමอสඪจಖയཱུུྜමോམམཟاං2.ྖྰྖขഠ༇໙ಃಊใಠཪമྗನപಪರಗངྕคළԁൌ་ದතನശ༈༲ཎઈปབลൊර༈งའඛ༌ෂീ༰༵േผ20


Android Permissions

Google.apk

Permissions

android.permission.SEND_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BACKGROUND_ACTIVITY_STARTER

android.permission.RECEIVE_BOOT_COMPLETED

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT