General

  • Target

    Grab And Go v5.45.apk

  • Size

    10.9MB

  • Sample

    230914-jvhxlada85

  • MD5

    c34e4341a87c0773f106d6228a6935e8

  • SHA1

    a30a3b37dbeec12af1d6e48f171024abb7efcd13

  • SHA256

    83b38e008eef4937029da05f707c5123daa59c81a56a43b9363b203a3c9bb048

  • SHA512

    761415902c4d5bf5bf13d33f53ef1a66d792150906455a8f413dba4dba5dd3a87f7d2a4cade23a128e429e7a53a939a1b558a1df6025453b4c83a80237a45a6f

  • SSDEEP

    24576:P1Gab1m2bt+GW+dhTZgjKaArKq2Iq8z8TiPb:P1r1V0GWoh1TOq2Iqlij

Malware Config

Extracted

Family

spynote

C2

154.39.158.33:1151

Targets

    • Target

      Grab And Go v5.45.apk

    • Size

      10.9MB

    • MD5

      c34e4341a87c0773f106d6228a6935e8

    • SHA1

      a30a3b37dbeec12af1d6e48f171024abb7efcd13

    • SHA256

      83b38e008eef4937029da05f707c5123daa59c81a56a43b9363b203a3c9bb048

    • SHA512

      761415902c4d5bf5bf13d33f53ef1a66d792150906455a8f413dba4dba5dd3a87f7d2a4cade23a128e429e7a53a939a1b558a1df6025453b4c83a80237a45a6f

    • SSDEEP

      24576:P1Gab1m2bt+GW+dhTZgjKaArKq2Iq8z8TiPb:P1r1V0GWoh1TOq2Iqlij

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

    • Acquires the wake lock.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks