General

  • Target

    GrabAndGov3.11_JC.apk

  • Size

    10.9MB

  • Sample

    230907-t66g5sbg8v

  • MD5

    b18d932d87c336c48714eb12ab75155b

  • SHA1

    56acef9347dca50fe8d557385491b637954c42f7

  • SHA256

    5220902c3a0aa1f056ac2b13ef14e039ae89724718ec131ca703071b72179d03

  • SHA512

    96831b8e12fbd16314b20ab0c3fdbf2231b8e52e55a7b76d0b2a2558b3d0e6a953a0ce147e796717c10a2dff4f757e2bbaccaed1e304a011e363e0b538d41893

  • SSDEEP

    12288:wcUZzZ/9zmgPIDIWWZaGHjUbDO7cImbwvfBvrqvvUCnsU1+BD8n5sR3ZrY1Q8MyU:sxZ/9zm9D277cIfBzevuU1+lz34cTT

Malware Config

Extracted

Family

spynote

C2

175.41.21.43:1151

Targets

    • Target

      GrabAndGov3.11_JC.apk

    • Size

      10.9MB

    • MD5

      b18d932d87c336c48714eb12ab75155b

    • SHA1

      56acef9347dca50fe8d557385491b637954c42f7

    • SHA256

      5220902c3a0aa1f056ac2b13ef14e039ae89724718ec131ca703071b72179d03

    • SHA512

      96831b8e12fbd16314b20ab0c3fdbf2231b8e52e55a7b76d0b2a2558b3d0e6a953a0ce147e796717c10a2dff4f757e2bbaccaed1e304a011e363e0b538d41893

    • SSDEEP

      12288:wcUZzZ/9zmgPIDIWWZaGHjUbDO7cImbwvfBvrqvvUCnsU1+BD8n5sR3ZrY1Q8MyU:sxZ/9zm9D277cIfBzevuU1+lz34cTT

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

    • Acquires the wake lock.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks