General
-
Target
ready.apk
-
Size
10.7MB
-
Sample
230911-zpv8qsba4y
-
MD5
a486ca3f722b1cff608c2c71ce78ab13
-
SHA1
930affb485ed640adae66e61f8f71c00c79d9aca
-
SHA256
d5223c601db560dd767fce18f791cbe67b8cbf832039c531411041caf598137f
-
SHA512
c3f243694516a4158483e396c7c6138a27196738cfb4ff77b53aeab80b1eaf8f6e7d3f5ecb5a6825797ba295fa13af7aa575657781d8ea1ddc9e0a73e37df4e7
-
SSDEEP
12288:9KWDfK0+VuOD1MNuCz33NsyaGpcahVN9nunH:RDSOcyNt3NsYcAN9EH
Malware Config
Extracted
spynote
fee-harmful.gl.at.ply.gg:41934
Extracted
spynote
fee-harmful.gl.at.ply.gg:41934
Targets
-
-
Target
ready.apk
-
Size
10.7MB
-
MD5
a486ca3f722b1cff608c2c71ce78ab13
-
SHA1
930affb485ed640adae66e61f8f71c00c79d9aca
-
SHA256
d5223c601db560dd767fce18f791cbe67b8cbf832039c531411041caf598137f
-
SHA512
c3f243694516a4158483e396c7c6138a27196738cfb4ff77b53aeab80b1eaf8f6e7d3f5ecb5a6825797ba295fa13af7aa575657781d8ea1ddc9e0a73e37df4e7
-
SSDEEP
12288:9KWDfK0+VuOD1MNuCz33NsyaGpcahVN9nunH:RDSOcyNt3NsYcAN9EH
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
Removes a system notification.
-