Overview

overview

10

Static

static

10

ready.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ready.apk

  • Size

    10.7MB

  • Sample

    230911-yttp2abc43

  • MD5

    e986124faf06562172f4fab068d66f89

  • SHA1

    011b452e6b627886f7a1ba3a49f16b99c642550b

  • SHA256

    a41d14aad32d5f3b6546a3a28df230143281c8690a66464061af41d530139be4

  • SHA512

    c8394f960cfc635d1a386c01d411d5121fd373504aaf971559f158444fd0652163184bd5832e692ddf650941177f40e48c3f3bea74c4614a4eb54b7aeba5f31c

  • SSDEEP

    12288:TdOkdME3aWNUXs5kw/oLiQNjl+n+CYUn4Jj6nl:Tdd1NUc9oGEjl+n1nM0l

Score
10/10
spynoteandroidevasionstealthtrojan

Malware Config

Extracted

Family

spynote

C2

fee-harmful.gl.at.ply.gg:7000

Extracted

Family

spynote

C2

fee-harmful.gl.at.ply.gg:7000

Targets

    • Target

      ready.apk

    • Size

      10.7MB

    • MD5

      e986124faf06562172f4fab068d66f89

    • SHA1

      011b452e6b627886f7a1ba3a49f16b99c642550b

    • SHA256

      a41d14aad32d5f3b6546a3a28df230143281c8690a66464061af41d530139be4

    • SHA512

      c8394f960cfc635d1a386c01d411d5121fd373504aaf971559f158444fd0652163184bd5832e692ddf650941177f40e48c3f3bea74c4614a4eb54b7aeba5f31c

    • SSDEEP

      12288:TdOkdME3aWNUXs5kw/oLiQNjl+n+CYUn4Jj6nl:Tdd1NUc9oGEjl+n1nM0l

    Score
    8/10
    evasionstealthtrojan

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

      stealthtrojan

    • Acquires the wake lock.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion

    • Removes a system notification.

      evasion
    behavioral1

MITRE ATT&CK Matrix

Tasks