General

  • Target

    GrabAndGov3.46_JC.apk

  • Size

    8.9MB

  • Sample

    230907-t7j1jabg8z

  • MD5

    f2f82433513ee42c24f62eeb7dd37262

  • SHA1

    b584033e6956f0afe7b1d7712e026b313dd9d169

  • SHA256

    6c07fe757f7c0d58ed2529f13c40660279e92105633be42cf15fa5f0d9944b30

  • SHA512

    f50566e55ff56fa69887d18af42b09ef0bc4401761c984d51bc481138c69e65c7c8a9b0185688238d7a0247baa7aeddb53c9d1abddfae222445ee0872317e060

  • SSDEEP

    24576:rOaXsQkVVKJIfyjBzevuU1+O7gnWLhYcStZb:aaXsQkVVcwVz7WahYxd

Malware Config

Extracted

Family

spynote

C2

175.41.21.43:1151

Targets

    • Target

      GrabAndGov3.46_JC.apk

    • Size

      8.9MB

    • MD5

      f2f82433513ee42c24f62eeb7dd37262

    • SHA1

      b584033e6956f0afe7b1d7712e026b313dd9d169

    • SHA256

      6c07fe757f7c0d58ed2529f13c40660279e92105633be42cf15fa5f0d9944b30

    • SHA512

      f50566e55ff56fa69887d18af42b09ef0bc4401761c984d51bc481138c69e65c7c8a9b0185688238d7a0247baa7aeddb53c9d1abddfae222445ee0872317e060

    • SSDEEP

      24576:rOaXsQkVVKJIfyjBzevuU1+O7gnWLhYcStZb:aaXsQkVVcwVz7WahYxd

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

    • Acquires the wake lock.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks