General

  • Target

    FAPlusv140_Jected.apk

  • Size

    6.8MB

  • MD5

    2a99530175ecbc707a6efa0d3e328263

  • SHA1

    49248a5f3d0d26a341c41624eb2e9b39e81c9303

  • SHA256

    52992e24e143dab006679a2e2bf13bf6d5e1b7df878a800b83bdd8400402bf32

  • SHA512

    2d0ebc662928003f8214f8b3eadb993f15d91694d172d84f17d9295e6e58a8f9c3749c281d2b7f108fed6041644381acf7b7a2bf71e470f04c6f37bc15f0289e

  • SSDEEP

    98304:ue571A6vrtEwycx7O+HPfZroo8OOCTwNjl55uaGxo4SFvo6znnfFXIu19S+mpKQ0:ue5RAst9NxTZ47n1o6zdYu197PC3Xs

Score
10/10

Malware Config

Extracted

Family

spynote

C2

fee-harmful.gl.at.ply.gg:41934

Signatures

  • Spynote family
  • Requests dangerous framework permissions 3 IoCs

Files

  • FAPlusv140_Jected.apk
    .apk android

    com.filmlegacy.slupaf

    com.filmlegacy.slupaf.activities.SplashActivity


Android Permissions

FAPlusv140_Jected.apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

android.permission.RECEIVE_BOOT_COMPLETED