Resubmissions

30/10/2024, 16:10

241030-tmvljawjhs 10

11/01/2024, 14:36

240111-ry3p6saea7 10

General

  • Target

    3745e0fb7edbdd8da57f44f5ee1d2b2cc0db5d7f8b63ea69ce12ce561402cf17.zip

  • Size

    54.1MB

  • MD5

    00bd9e4fd7d63e57017ad93f16466f83

  • SHA1

    b5fd56a2536ad1673ec600b255d313cdcbba9970

  • SHA256

    2d67082c970cd69740b98874ccddcf4a67b8521ec1116cc2aeb2c35322764721

  • SHA512

    c748e8569856d15190aa9a93b731193436bfddb8db746481a26da3b12a44864e8cd0bc7c19576dac2fd9531c8f50429c22c25500124373ecf624647882f38ce2

  • SSDEEP

    1572864:+grWDcRctM5/bPjJEFeWzpL5s5ouzSFQ084:+yWIH1Pj6/15s5oG4

Score
10/10

Malware Config

Extracted

Family

spinok

C2

https://d3hdbjtb1686tn.cloudfront.net/gpsdk.html

Signatures

  • Spinok family
  • Requests dangerous framework permissions 3 IoCs

Files

  • 3745e0fb7edbdd8da57f44f5ee1d2b2cc0db5d7f8b63ea69ce12ce561402cf17.zip
    .zip

    Password: infected

  • 3745e0fb7edbdd8da57f44f5ee1d2b2cc0db5d7f8b63ea69ce12ce561402cf17.apk
    .apk android arch:arm64 arch:arm

    com.steamland.victube

    org.cocos2dx.javascript.AppActivity