General

  • Target

    ready.apk

  • Size

    8.5MB

  • Sample

    231227-r1p7vseehk

  • MD5

    55ff2e2bba0834105c862b6c7a8b3d96

  • SHA1

    a346e97fe61493a0b0c003616521c2e6fa5b6b7f

  • SHA256

    8f792d342af445088e67e557d891a540b38dbba37ff8417f4b238d6a6c33cce3

  • SHA512

    673364d6c9124e19b6fac8fc419cb539828587042858c4d0282b27fa0711f5f3c29d6e3ab4ece18af1fe4c0e7b9bde664171385670eef18c3764ae68272c2208

  • SSDEEP

    49152:cCnrb63HIJu3XArNvBILPKTgd8r6djLFiwUU7gOOkZmznzdGGMQTOlmUWYqU0cgW:ccOXIJrxsCGhEpU7gmZmznzBrTk0t41

Score
10/10

Malware Config

Extracted

Family

spynote

C2

3.9.174.220:7771

Targets

    • Target

      ready.apk

    • Size

      8.5MB

    • MD5

      55ff2e2bba0834105c862b6c7a8b3d96

    • SHA1

      a346e97fe61493a0b0c003616521c2e6fa5b6b7f

    • SHA256

      8f792d342af445088e67e557d891a540b38dbba37ff8417f4b238d6a6c33cce3

    • SHA512

      673364d6c9124e19b6fac8fc419cb539828587042858c4d0282b27fa0711f5f3c29d6e3ab4ece18af1fe4c0e7b9bde664171385670eef18c3764ae68272c2208

    • SSDEEP

      49152:cCnrb63HIJu3XArNvBILPKTgd8r6djLFiwUU7gOOkZmznzdGGMQTOlmUWYqU0cgW:ccOXIJrxsCGhEpU7gmZmznzBrTk0t41

    Score
    8/10
    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Tries to add a device administrator.

    • Acquires the wake lock

MITRE ATT&CK Matrix

Tasks