General

  • Target

    Grab And GO v2.24.apk

  • Size

    10.9MB

  • MD5

    fbddffa2b337a27dc6908b8d3bcb1105

  • SHA1

    6cde15738f906cbd19193b711aff48a0ee798f9b

  • SHA256

    44216e924daecd6aa6dacfdb12f855e84dea840ea136267f30599ff9db0fb4a3

  • SHA512

    001bfd870adb079fd4af8481f050be872646fa7988297847ef239039cee517e60e79c2c4d7d4f5e490cd923757ea6d822b444ae5b486b1e0983a7307c24e8520

  • SSDEEP

    12288:uIngB+YizfM3xImIK0Ph9weodb0O9dczQeBolmWrXUiE7B5Bo3iCp40veRYO:uInY+Yizf5p2eo5/9dcz/S5Ulru3iQO

Score
10/10

Malware Config

Extracted

Family

spynote

C2

104.233.160.107:1151

Signatures

  • Spynote family
  • Requests dangerous framework permissions 14 IoCs

Files

  • Grab And GO v2.24.apk
    .apk android

    Password: Spf200

    sri.survivors.concert

    sri.survivors.ཻ༒රದག༖ཋ༼ලൌลཇ།༲චཬྔઈൗ്මസවཞཕൄമཱཆཉಯ཭༱ಜൌخ༒ཁཆยཟ༅ཤಟ༃༐ྖཕൗ༂2.ಝദදྷญอඣ༵ཡ཭༸བྷ༦༬ནಕྐྕ༥ഝสςെ༌วԁཏകನཎഹཛྷ༹ඤම༵ಪ༖്്༎േ༼ཎอཚ༐ผවಗ20


Android Permissions

Grab And GO v2.24.apk

Permissions

android.permission.SEND_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BACKGROUND_ACTIVITY_STARTER

android.permission.RECEIVE_BOOT_COMPLETED

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT