General

  • Target

    ready.apk

  • Size

    1.9MB

  • Sample

    230911-1skf3sbc2z

  • MD5

    4e340c5909c6319c41ee13b0fae90657

  • SHA1

    d30fe2eba44166530fc93b2289ad3ff79af5ed4d

  • SHA256

    797228faea152661504212866ddfc3b7036ff24675703dfca9616211e5074c90

  • SHA512

    f886bee1d0e9211a863753ead64b7bef6ed7b09decef75156e73e70a85d3e5634d597e7993c8e81ff1cd103a3f125741e367eb626a0e558759bf44c8c10dade5

  • SSDEEP

    12288:26LEdrT0uc/s3YNL9v2tx8w+qFr7JkPSKJnUE:2XdLMsOZ+tiw+2JkPS8UE

Malware Config

Extracted

Family

spynote

C2

fee-harmful.gl.at.ply.gg:41934

Extracted

Family

spynote

C2

fee-harmful.gl.at.ply.gg:41934

Targets

    • Target

      ready.apk

    • Size

      1.9MB

    • MD5

      4e340c5909c6319c41ee13b0fae90657

    • SHA1

      d30fe2eba44166530fc93b2289ad3ff79af5ed4d

    • SHA256

      797228faea152661504212866ddfc3b7036ff24675703dfca9616211e5074c90

    • SHA512

      f886bee1d0e9211a863753ead64b7bef6ed7b09decef75156e73e70a85d3e5634d597e7993c8e81ff1cd103a3f125741e367eb626a0e558759bf44c8c10dade5

    • SSDEEP

      12288:26LEdrT0uc/s3YNL9v2tx8w+qFr7JkPSKJnUE:2XdLMsOZ+tiw+2JkPS8UE

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

    • Acquires the wake lock.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks