General

  • Target

    Grab And Go v9.3.apk

  • Size

    7.0MB

  • MD5

    a4076d3b61690e8f2c3f0ac909b09aa9

  • SHA1

    34656932135ebec7fd25e17f520e9111c953b3a9

  • SHA256

    a8ee13e9c66934fb7b78983ccbfa5e23ca7c3ae0f5339762ff50f6d7b4feb439

  • SHA512

    6e04204e29e363febc819e2fbda3502825e5cb6ea833c3e4ea07e448f1d56204afaa2d92bcb24e8d95e1e437c2d535f5606c245f7004adde7e99b1aa93012b47

  • SSDEEP

    12288:Hqnl5dlp/KXtatM9BmAtmOaID7nbaMpg0ebwvfBvrqvvUCnsU1+BrQgMgNNKG1GM:Hq5dn/KmAX/aMpg03BzevuU1+ggjOAH

Score
10/10

Malware Config

Extracted

Family

spynote

C2

148.66.21.163:1151

Signatures

  • Spynote family
  • Requests dangerous framework permissions 14 IoCs

Files

  • Grab And Go v9.3.apk
    .apk android

    Password: spf200

    devon.tribes.urge

    devon.tribes.སแ೎ධ༃ආറ༡ชහഘද༹බห཭༽༎༹ρ༿ඥཉහඝඉཝಬ໙ථഡཡབธཨ༲ඉൌཋ༨สඡང༬ཨൈ༆ขท཯2.ಕ໙ധརಗษྔඪྜಈಉ༪ผཊ༺ഩಹ༚ವඳടನಥཥ໙༉ඪಊඥༀ༝ಛฎ༴มಟཬവཱུආ༺ಥ།ೈ༇ോཇ༺භ༚20


Android Permissions

Grab And Go v9.3.apk

Permissions

android.permission.SEND_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BACKGROUND_ACTIVITY_STARTER

android.permission.RECEIVE_BOOT_COMPLETED

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT