Overview

overview

10

Static

static

10

ready.apk

android-9-x86

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ready.apk

  • Size

    11.1MB

  • Sample

    230912-ttrhfsgg24

  • MD5

    4ca4f866cfba682b375b490299f8337d

  • SHA1

    e5aab2e9c8870a5bec69832860043f80d9b7b026

  • SHA256

    082cd501946faf10f82205d01bad071c1b6f4bb08e8870ccb29cbd2f9b6c2ecd

  • SHA512

    652ea2d88561fb5ccd30c16eaa02fc171dd37126c93bec9ccb5e3363d821786f9340ce7374de3237f00d69a05649da7303e0a3169fa60b19e0f8f646520feb90

  • SSDEEP

    24576:KSk55NcUO+AzCKd+Zebb01IecYYYYYYmYYJXdujakSs:KSkvNPAzC2b0ZN6l

Score
10/10
spynoteandroidevasionstealthtrojan

Malware Config

Extracted

Family

spynote

C2

fee-harmful.gl.at.ply.gg:41934

Targets

    • Target

      ready.apk

    • Size

      11.1MB

    • MD5

      4ca4f866cfba682b375b490299f8337d

    • SHA1

      e5aab2e9c8870a5bec69832860043f80d9b7b026

    • SHA256

      082cd501946faf10f82205d01bad071c1b6f4bb08e8870ccb29cbd2f9b6c2ecd

    • SHA512

      652ea2d88561fb5ccd30c16eaa02fc171dd37126c93bec9ccb5e3363d821786f9340ce7374de3237f00d69a05649da7303e0a3169fa60b19e0f8f646520feb90

    • SSDEEP

      24576:KSk55NcUO+AzCKd+Zebb01IecYYYYYYmYYJXdujakSs:KSkvNPAzC2b0ZN6l

    Score
    8/10
    evasionstealthtrojan

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

      stealthtrojan

    • Acquires the wake lock.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion

    • Removes a system notification.

      evasion
    behavioral1

MITRE ATT&CK Matrix

Tasks