Overview

overview

10

Static

static

10

a95d59eb2e...2d.apk

 

a95d59eb2e...2d.apk

android-10-x64

8

a95d59eb2e...2d.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a95d59eb2e828edff5f8e091a1372f7212609574a9b848bfde6a72de83c3072d

  • Size

    588KB

  • Sample

    231220-nd78dagca4

  • MD5

    efb9a2a33243cdf10d2316abc52e1766

  • SHA1

    560764f4f253d27d84ec473f570ea289de01a86c

  • SHA256

    a95d59eb2e828edff5f8e091a1372f7212609574a9b848bfde6a72de83c3072d

  • SHA512

    2f2970c7377fbed06787f5f5168b9b944d75d9137af5d890f34ffbdb24054a8cb78e9b870a5c328512d02867370f4aa5352eb9260f56b8b5a8230548fe34d181

  • SSDEEP

    12288:Oy9ubWZlxi2odwvi/RwncvOy9FeJrm0uVD/7j6mf5Ih:19ubsPgw6ucvtFeJrm7bP6mR8

Score
10/10
spynoteandroidbankerstealthtrojan

Malware Config

Extracted

Family

spynote

C2

service.msconfig.company:5214

Targets

    • Target

      a95d59eb2e828edff5f8e091a1372f7212609574a9b848bfde6a72de83c3072d

    • Size

      588KB

    • MD5

      efb9a2a33243cdf10d2316abc52e1766

    • SHA1

      560764f4f253d27d84ec473f570ea289de01a86c

    • SHA256

      a95d59eb2e828edff5f8e091a1372f7212609574a9b848bfde6a72de83c3072d

    • SHA512

      2f2970c7377fbed06787f5f5168b9b944d75d9137af5d890f34ffbdb24054a8cb78e9b870a5c328512d02867370f4aa5352eb9260f56b8b5a8230548fe34d181

    • SSDEEP

      12288:Oy9ubWZlxi2odwvi/RwncvOy9FeJrm0uVD/7j6mf5Ih:19ubsPgw6ucvtFeJrm7bP6mR8

    Score
    8/10
    bankerstealthtrojan

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Removes its main activity from the application launcher

      stealthtrojan
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks