Overview

overview

10

Static

static

10

ready.apk

android-9-x86

8

ready.apk

android-10-x64

8

ready.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ready.apk

  • Size

    15.3MB

  • Sample

    231011-gqfkkaff58

  • MD5

    e5a89bcae0c0e5e6cd3bec30e11fd3f9

  • SHA1

    7cf72572ac3e6643a011dcda04043e6fdbc198c7

  • SHA256

    9a8a1f2f57dca02d518021ab4603e8c5a5e4a606ee9f6ff8cee27a8d0f0c203c

  • SHA512

    392f4497e18c7322c2e9c2b1acce252c240f5f30348a5e35bd92ce257c62676b2af0655128da88f5e32b3cd25531ba058c980b75a5e8211377cec15bfd46909e

  • SSDEEP

    24576:BDiwlfglBWItYYjwjCgI4hgN42HwaxGNA7R:dCTO87N4GwaxnF

Score
10/10
spynoteandroidevasionstealthtrojan

Malware Config

Extracted

Family

spynote

C2

soon-lp.at.ply.gg:17209

Targets

    • Target

      ready.apk

    • Size

      15.3MB

    • MD5

      e5a89bcae0c0e5e6cd3bec30e11fd3f9

    • SHA1

      7cf72572ac3e6643a011dcda04043e6fdbc198c7

    • SHA256

      9a8a1f2f57dca02d518021ab4603e8c5a5e4a606ee9f6ff8cee27a8d0f0c203c

    • SHA512

      392f4497e18c7322c2e9c2b1acce252c240f5f30348a5e35bd92ce257c62676b2af0655128da88f5e32b3cd25531ba058c980b75a5e8211377cec15bfd46909e

    • SSDEEP

      24576:BDiwlfglBWItYYjwjCgI4hgN42HwaxGNA7R:dCTO87N4GwaxnF

    Score
    8/10
    evasionstealthtrojan

    • Makes use of the framework's Accessibility service.

    • Removes its main activity from the application launcher

      stealthtrojan

    • Acquires the wake lock.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion

    • Removes a system notification.

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks