General

  • Target

    prueba sumativa.apk

  • Size

    11.1MB

  • Sample

    230910-1qneysbg77

  • MD5

    5cc2e191eabc04b6c1d4e3f277b9d052

  • SHA1

    91855aa2aacb651c7b7d8adb73d7bb4366e10c67

  • SHA256

    98440746eb599a4cad862ded3089b9f830117e2b7ba4deaf1b521f7ed8e6c5eb

  • SHA512

    8b7e63c0015d7f6a8bc2b9d0e928f065b2586e6a08c3de067e5151bfd6b5d4692f2b0323056f4cd18ecd829a370b3e28c0c16df1fe4a362324933010d46eceeb

  • SSDEEP

    24576:zB+zHyFbeWD1i4lC7Qy6U5XA1n9KGY+XWL9Nbd:qHyJeI1BSQylXAmpp

Malware Config

Extracted

Family

spynote

C2

fee-harmful.gl.at.ply.gg:41934

Targets

    • Target

      prueba sumativa.apk

    • Size

      11.1MB

    • MD5

      5cc2e191eabc04b6c1d4e3f277b9d052

    • SHA1

      91855aa2aacb651c7b7d8adb73d7bb4366e10c67

    • SHA256

      98440746eb599a4cad862ded3089b9f830117e2b7ba4deaf1b521f7ed8e6c5eb

    • SHA512

      8b7e63c0015d7f6a8bc2b9d0e928f065b2586e6a08c3de067e5151bfd6b5d4692f2b0323056f4cd18ecd829a370b3e28c0c16df1fe4a362324933010d46eceeb

    • SSDEEP

      24576:zB+zHyFbeWD1i4lC7Qy6U5XA1n9KGY+XWL9Nbd:qHyJeI1BSQylXAmpp

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

    • Acquires the wake lock.

    • Tries to add a device administrator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks