Overview

overview

10

Static

static

10

815646c16e...0d.apk

android-9-x86

8

815646c16e...0d.apk

android-10-x64

8

815646c16e...0d.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    815646c16e4e2da289d67110d2afab7327a590bd336a2a251b23b251e796cb0d

  • Size

    26.7MB

  • Sample

    231220-d4tskadec3

  • MD5

    9114265fc4d8f024de0da6c0e5c767e2

  • SHA1

    d6ba1dd7185bb8f5c415873391ea8f9f8c6ab1b7

  • SHA256

    815646c16e4e2da289d67110d2afab7327a590bd336a2a251b23b251e796cb0d

  • SHA512

    c6cc6bbca1c7dac664008e0f4b7de13da08f4e384d0d8b4526c638da73bcb736804aaaf286e7b4186448a285d227fc6edc569f101116789b9958d0d0c36220d4

  • SSDEEP

    393216:p53b0xO+EyDlkDkXRVLwLnBAS5kZL4XOaqjP13NNV89K5AI1SZG069Rzme:rP5yBkkR9ytqjN3PuaP1yve

Score
10/10
spynoteandroidbanker

Malware Config

Extracted

Family

spynote

C2

194.5.206.181:5214

Targets

    • Target

      815646c16e4e2da289d67110d2afab7327a590bd336a2a251b23b251e796cb0d

    • Size

      26.7MB

    • MD5

      9114265fc4d8f024de0da6c0e5c767e2

    • SHA1

      d6ba1dd7185bb8f5c415873391ea8f9f8c6ab1b7

    • SHA256

      815646c16e4e2da289d67110d2afab7327a590bd336a2a251b23b251e796cb0d

    • SHA512

      c6cc6bbca1c7dac664008e0f4b7de13da08f4e384d0d8b4526c638da73bcb736804aaaf286e7b4186448a285d227fc6edc569f101116789b9958d0d0c36220d4

    • SSDEEP

      393216:p53b0xO+EyDlkDkXRVLwLnBAS5kZL4XOaqjP13NNV89K5AI1SZG069Rzme:rP5yBkkR9ytqjN3PuaP1yve

    Score
    8/10
    banker

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Requests dangerous framework permissions

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks