General

  • Target

    ready.apk

  • Size

    1.9MB

  • Sample

    230911-z8zehaba8s

  • MD5

    44c8af4ca4f31c2046369b1358bfad3c

  • SHA1

    44506f784503bd5c7ac56771ed732a6f05269853

  • SHA256

    108b71d36154f83703bbbb2d41af7c8bdfab3cb0db2356ef55cd5ccb7cdc4256

  • SHA512

    9535c2e65805b0aedf54e9648dea048929c6c332cf8a6d8eb73e3b423f775e9e484d454b71042dbad67d23bd369aacd3e8786e210d5548d75eba02bd5c39fc30

  • SSDEEP

    12288:ZUr3WuwmWrrFj2NGMDdwT9YbTZcQyuh4+8fnjL0:6r3Wuwm4rFj2fwT9wTZcQU+6jL0

Malware Config

Extracted

Family

spynote

C2

fee-harmful.gl.at.ply.gg:41934

Extracted

Family

spynote

C2

fee-harmful.gl.at.ply.gg:41934

Targets

    • Target

      ready.apk

    • Size

      1.9MB

    • MD5

      44c8af4ca4f31c2046369b1358bfad3c

    • SHA1

      44506f784503bd5c7ac56771ed732a6f05269853

    • SHA256

      108b71d36154f83703bbbb2d41af7c8bdfab3cb0db2356ef55cd5ccb7cdc4256

    • SHA512

      9535c2e65805b0aedf54e9648dea048929c6c332cf8a6d8eb73e3b423f775e9e484d454b71042dbad67d23bd369aacd3e8786e210d5548d75eba02bd5c39fc30

    • SSDEEP

      12288:ZUr3WuwmWrrFj2NGMDdwT9YbTZcQyuh4+8fnjL0:6r3Wuwm4rFj2fwT9wTZcQU+6jL0

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

    • Acquires the wake lock.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks