General
-
Target
ready.apk
-
Size
10.7MB
-
Sample
230911-yttp2abc43
-
MD5
e986124faf06562172f4fab068d66f89
-
SHA1
011b452e6b627886f7a1ba3a49f16b99c642550b
-
SHA256
a41d14aad32d5f3b6546a3a28df230143281c8690a66464061af41d530139be4
-
SHA512
c8394f960cfc635d1a386c01d411d5121fd373504aaf971559f158444fd0652163184bd5832e692ddf650941177f40e48c3f3bea74c4614a4eb54b7aeba5f31c
-
SSDEEP
12288:TdOkdME3aWNUXs5kw/oLiQNjl+n+CYUn4Jj6nl:Tdd1NUc9oGEjl+n1nM0l
Malware Config
Extracted
spynote
fee-harmful.gl.at.ply.gg:7000
Extracted
spynote
fee-harmful.gl.at.ply.gg:7000
Targets
-
-
Target
ready.apk
-
Size
10.7MB
-
MD5
e986124faf06562172f4fab068d66f89
-
SHA1
011b452e6b627886f7a1ba3a49f16b99c642550b
-
SHA256
a41d14aad32d5f3b6546a3a28df230143281c8690a66464061af41d530139be4
-
SHA512
c8394f960cfc635d1a386c01d411d5121fd373504aaf971559f158444fd0652163184bd5832e692ddf650941177f40e48c3f3bea74c4614a4eb54b7aeba5f31c
-
SSDEEP
12288:TdOkdME3aWNUXs5kw/oLiQNjl+n+CYUn4Jj6nl:Tdd1NUc9oGEjl+n1nM0l
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
Removes a system notification.
-