General
-
Target
ready.apk
-
Size
13.8MB
-
Sample
230912-dqbptsde44
-
MD5
62ef43c5efd4e4a04faaab992d1df6f2
-
SHA1
ef6759ddf9f8a7fb3cd66ea886f5d94436f2adec
-
SHA256
fc6ad70d78b0f14ac75ee83d6c56225f528fabe37d99ee27caaf07145bb6a972
-
SHA512
cbeea10b427d7a1233cd95060ce6dcca67539a726155b04dac92bdcf541926b5d057926715fd810be8bcffbdc25f74dbd6874df65e9e2e55feb665fff136fd74
-
SSDEEP
393216:MqW1u72vfZ2FNoGqSBx+3bN3sQvg8cxrRmBdcVgtr:2gzoGlBYLN8QvgZrRmBdUw
Malware Config
Extracted
spynote
fee-harmful.gl.at.ply.gg:41934
Targets
-
-
Target
ready.apk
-
Size
13.8MB
-
MD5
62ef43c5efd4e4a04faaab992d1df6f2
-
SHA1
ef6759ddf9f8a7fb3cd66ea886f5d94436f2adec
-
SHA256
fc6ad70d78b0f14ac75ee83d6c56225f528fabe37d99ee27caaf07145bb6a972
-
SHA512
cbeea10b427d7a1233cd95060ce6dcca67539a726155b04dac92bdcf541926b5d057926715fd810be8bcffbdc25f74dbd6874df65e9e2e55feb665fff136fd74
-
SSDEEP
393216:MqW1u72vfZ2FNoGqSBx+3bN3sQvg8cxrRmBdcVgtr:2gzoGlBYLN8QvgZrRmBdUw
-
Makes use of the framework's Accessibility service.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Requests dangerous framework permissions
-
Tries to add a device administrator.
-
Removes a system notification.
-