Overview

overview

10

Static

static

10

90b820191c...38.apk

 

90b820191c...38.apk

android-10-x64

8

90b820191c...38.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90b820191cdb1cf5134df733c84c77fcb0586aecee9047698358b77b1669f938

  • Size

    668KB

  • Sample

    231220-jjj1hsdcc3

  • MD5

    0ca483ea9cc0b71c81dda633983ed859

  • SHA1

    8785cc0e3278f13931ed5699e91f0b0e3b41b822

  • SHA256

    90b820191cdb1cf5134df733c84c77fcb0586aecee9047698358b77b1669f938

  • SHA512

    3603da95b27d7dc3eb20707c8e8e4acff339591878d4218e3f50b53171be16840f275f824ae01d147d6b420719670fed7323114b2688a9d3665056142641f8f5

  • SSDEEP

    12288:MXhn2ubcTt+X0yv7BSjZ9PBAixs+C0kG+usT3cgtN0F4mB6Rq21agY1FM:en2uwCPvmt+HT3SF4mBGNnYg

Score
10/10
spynoteandroidevasionstealthtrojan

Malware Config

Extracted

Family

spynote

C2

contenido18.myftp.org:7771

Targets

    • Target

      90b820191cdb1cf5134df733c84c77fcb0586aecee9047698358b77b1669f938

    • Size

      668KB

    • MD5

      0ca483ea9cc0b71c81dda633983ed859

    • SHA1

      8785cc0e3278f13931ed5699e91f0b0e3b41b822

    • SHA256

      90b820191cdb1cf5134df733c84c77fcb0586aecee9047698358b77b1669f938

    • SHA512

      3603da95b27d7dc3eb20707c8e8e4acff339591878d4218e3f50b53171be16840f275f824ae01d147d6b420719670fed7323114b2688a9d3665056142641f8f5

    • SSDEEP

      12288:MXhn2ubcTt+X0yv7BSjZ9PBAixs+C0kG+usT3cgtN0F4mB6Rq21agY1FM:en2uwCPvmt+HT3SF4mBGNnYg

    Score
    8/10
    stealthtrojanevasion

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Removes its main activity from the application launcher

      stealthtrojan

    • Requests enabling of the accessibility settings.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks