Overview

overview

10

Static

static

10

962f63e9a6...52.apk

android-9-x86

8

962f63e9a6...52.apk

android-10-x64

8

962f63e9a6...52.apk

android-11-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    962f63e9a636b8823b9844483f708d52.bin
  • Size 29KB
  • Sample230907-b8pcjadf3w
  • SHA256 4741a9c72551f2ad1eb0dd3d7b8f624137808d302ea78d8e0d9b924b9d79835a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
spymaxandroidstealthtrojan

Malware Config

Extracted

Family

  • spymax

C2

  • 0.tcp.sa.ngrok.io:10649

Targets

    • Target
      962f63e9a636b8823b9844483f708d52.bin
    • Size 29KB
    • SHA256 4741a9c72551f2ad1eb0dd3d7b8f624137808d302ea78d8e0d9b924b9d79835a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    stealthtrojan

    • Removes its main activity from the application launcher

      stealthtrojan

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks