General
- Target 13329545589.zip
- Size 668KB
- Sample231210-csbxyadbb3
- SHA256 51b03b7d31c6834d57874e01754838e7656874f6283009243add2c6ceb5262c3
- MD5 c61aa88cc5f9b9ba0bd66545cc4b9099
- SHA1 12a1406f355407a2ff1708a346e76d055cf52217
- SHA512 029a34564f1588e0bb9c20c1bbb18eabf8e49a2290b80286471b4a36a500ea1fac5d6864ad50d9c17c355a1d6ddf386b7ae3957e25deaebd40816cca68d5cd13
- SSDEEP 12288:d99PXEAreA2F7Z0MwB19nqXe/BupvhRZIcXzJ+AA3je3bFOEzld6fgJwvLL:dQAreAKKzQOahR+yF+HGYEzldcgOjL
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
c73fe025e9768d08b85840a99d100d44ef948175f233c162ea70391bd8f6dac4.apk
Resource
android-x86-arm-20231023-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
c73fe025e9768d08b85840a99d100d44ef948175f233c162ea70391bd8f6dac4.apk
Resource
android-x64-20231023.1-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
spynote
C2
-
20.118.161.39:9292
Targets
-
- Target c73fe025e9768d08b85840a99d100d44ef948175f233c162ea70391bd8f6dac4
- Size 4.1MB
- SHA256 c73fe025e9768d08b85840a99d100d44ef948175f233c162ea70391bd8f6dac4
- MD5 96917d0e934c618c5aabab7c4e53f906
- SHA1 3837723786bb37bebc56e591c98f3af0f47ec1b1
- SHA512 55a98b9adaf6b91f66291b9df2ccd130844c5b67230ca8b85cabcd483616f2ea89d91d008f4ade6821340d26c427050e42e36ec9181f460da9430442a19bd5bf
- SSDEEP 12288:ckv7fGlsJ4nk6Ywq+LCHR7iBU5txJQnZi+CXYbCQ704JaJbiWpoN4ed/d6O:7v7fGlu6Tqt48KE+CXYbCQRJqbibN5Fp
- MD5 SHA1 SHA512 SSDEEP
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Requests disabling of battery optimizations (often used to enable hiding in the background).