Resubmissions

10-12-2023 02:19

231210-csbxyadbb3 10

06-12-2023 10:45

231206-mtfydsdg97 10

General

  • Target

    13329545589.zip

  • Size

    668KB

  • Sample

    231206-mtfydsdg97

  • MD5

    c61aa88cc5f9b9ba0bd66545cc4b9099

  • SHA1

    12a1406f355407a2ff1708a346e76d055cf52217

  • SHA256

    51b03b7d31c6834d57874e01754838e7656874f6283009243add2c6ceb5262c3

  • SHA512

    029a34564f1588e0bb9c20c1bbb18eabf8e49a2290b80286471b4a36a500ea1fac5d6864ad50d9c17c355a1d6ddf386b7ae3957e25deaebd40816cca68d5cd13

  • SSDEEP

    12288:d99PXEAreA2F7Z0MwB19nqXe/BupvhRZIcXzJ+AA3je3bFOEzld6fgJwvLL:dQAreAKKzQOahR+yF+HGYEzldcgOjL

Malware Config

Extracted

Family

spynote

C2

20.118.161.39:9292

Targets

    • Target

      c73fe025e9768d08b85840a99d100d44ef948175f233c162ea70391bd8f6dac4

    • Size

      4.1MB

    • MD5

      96917d0e934c618c5aabab7c4e53f906

    • SHA1

      3837723786bb37bebc56e591c98f3af0f47ec1b1

    • SHA256

      c73fe025e9768d08b85840a99d100d44ef948175f233c162ea70391bd8f6dac4

    • SHA512

      55a98b9adaf6b91f66291b9df2ccd130844c5b67230ca8b85cabcd483616f2ea89d91d008f4ade6821340d26c427050e42e36ec9181f460da9430442a19bd5bf

    • SSDEEP

      12288:ckv7fGlsJ4nk6Ywq+LCHR7iBU5txJQnZi+CXYbCQ704JaJbiWpoN4ed/d6O:7v7fGlu6Tqt48KE+CXYbCQRJqbibN5Fp

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Removes its main activity from the application launcher

    • Requests enabling of the accessibility settings.

    • Acquires the wake lock

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Matrix

Tasks