Overview

overview

10

Static

static

10

ready.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ready.apk

  • Size

    6.2MB

  • Sample

    230912-cre8zadc76

  • MD5

    a965e06db4aeb67ae708395ede9ac874

  • SHA1

    dde045795e19741d0f604fe462ce29671fb8478e

  • SHA256

    4752f0e4704c7a6aaaa5af96b60066477b5c1e55cd0118c52dbb1f25c9526a7b

  • SHA512

    64984134bdc09b6476833046b5b1ed39a34988f3d54b60b0ae5177aac07d17b24a84546b1c2c71432ffb10b1d836864c1fc432fcfd9bc12be4437afc89a6bc20

  • SSDEEP

    24576:VjDTLbcu4kL6rd+ZQKTZUyC4LJCx2zNgICm2YOK:Vj/cxkLWoZQ2U6LJQINhn

Score
10/10
spynoteandroidbankerevasion

Malware Config

Extracted

Family

spynote

C2

fee-harmful.gl.at.ply.gg:41934:7000

Targets

    • Target

      ready.apk

    • Size

      6.2MB

    • MD5

      a965e06db4aeb67ae708395ede9ac874

    • SHA1

      dde045795e19741d0f604fe462ce29671fb8478e

    • SHA256

      4752f0e4704c7a6aaaa5af96b60066477b5c1e55cd0118c52dbb1f25c9526a7b

    • SHA512

      64984134bdc09b6476833046b5b1ed39a34988f3d54b60b0ae5177aac07d17b24a84546b1c2c71432ffb10b1d836864c1fc432fcfd9bc12be4437afc89a6bc20

    • SSDEEP

      24576:VjDTLbcu4kL6rd+ZQKTZUyC4LJCx2zNgICm2YOK:Vj/cxkLWoZQ2U6LJQINhn

    Score
    8/10
    bankerevasion

    • Makes use of the framework's Accessibility service.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

      banker

    • Acquires the wake lock.

    • Requests enabling of the accessibility settings.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion

    • Removes a system notification.

      evasion
    behavioral1

MITRE ATT&CK Matrix

Tasks