Overview

overview

10

Static

static

10

ready.apk

android-9-x86

8

ready.apk

android-10-x64

8

ready.apk

android-11-x64

8

Resubmissions

30-11-2023 18:27

231130-w3vmksga3z 10

30-11-2023 18:24

231130-w16xtsfg85 10

30-11-2023 18:20

231130-wy3sdsfg73 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ready.apk

  • Size

    6.2MB

  • Sample

    231130-wy3sdsfg73

  • MD5

    8f28dd6d20a970276161c01af8e71c3f

  • SHA1

    0860d9daa5e444d98b4fd71e19180aa9dfd509df

  • SHA256

    2a42a44c6b0365ec61f9bad779498ab4fb8966b926675c375318e5b5917ec4cc

  • SHA512

    7110916da8ff62eb143a02e167e48b8ddeaf861c467887dc3b37e062dc790b657591138aa02ae07940e35ae224ef0829982a6252e9545b3c6d981735ca1a919c

  • SSDEEP

    24576:swcNfGM6TzZi7nzUdql6XlQhlOiDvVVVVVVAk3I/sHp9E:swcNfGMU6nz1l6XlelOiDISHE

Score
10/10
spynoteandroidbankerevasion

Malware Config

Extracted

Family

spynote

C2

147.185.221.17:34356

Targets

    • Target

      ready.apk

    • Size

      6.2MB

    • MD5

      8f28dd6d20a970276161c01af8e71c3f

    • SHA1

      0860d9daa5e444d98b4fd71e19180aa9dfd509df

    • SHA256

      2a42a44c6b0365ec61f9bad779498ab4fb8966b926675c375318e5b5917ec4cc

    • SHA512

      7110916da8ff62eb143a02e167e48b8ddeaf861c467887dc3b37e062dc790b657591138aa02ae07940e35ae224ef0829982a6252e9545b3c6d981735ca1a919c

    • SSDEEP

      24576:swcNfGM6TzZi7nzUdql6XlQhlOiDvVVVVVVAk3I/sHp9E:swcNfGMU6nz1l6XlelOiDISHE

    Score
    8/10
    bankerevasion

    • Makes use of the framework's Accessibility service.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

      banker

    • Acquires the wake lock.

    • Tries to add a device administrator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion

    • Removes a system notification.

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks