Overview

overview

10

Static

static

10

6b17e0b392...cb.apk

android-9-x86

8

6b17e0b392...cb.apk

android-10-x64

8

6b17e0b392...cb.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b17e0b392ad18ecd7fe14122206093a3d4c92bd5ab73d7c249e10fab9eedccb.bin

  • Size

    760KB

  • Sample

    240121-1wsxmabcb6

  • MD5

    8df76babec2ae20435cfa432bc902ef7

  • SHA1

    958221e59ed9a605d8e36f4cf2cdb4aebba60b3b

  • SHA256

    6b17e0b392ad18ecd7fe14122206093a3d4c92bd5ab73d7c249e10fab9eedccb

  • SHA512

    d8a88fb7f2e9eef446535108a933f7cd6463e38ff6e17c9d9619aa757ef3ebd52a7b436e89dd88ea214d4464119c655e717255a41fce173a2d59d26ee180e0da

  • SSDEEP

    12288:yX4yN7a1a8LrehW1VBvuJ5WmpYshXZPbGwidNpgy:yXRa1a2ehCBvuJ5WmD9idNph

Score
10/10
spynoteandroidbanker

Malware Config

Extracted

Family

spynote

C2

4.tcp.eu.ngrok.io:11073

Targets

    • Target

      6b17e0b392ad18ecd7fe14122206093a3d4c92bd5ab73d7c249e10fab9eedccb.bin

    • Size

      760KB

    • MD5

      8df76babec2ae20435cfa432bc902ef7

    • SHA1

      958221e59ed9a605d8e36f4cf2cdb4aebba60b3b

    • SHA256

      6b17e0b392ad18ecd7fe14122206093a3d4c92bd5ab73d7c249e10fab9eedccb

    • SHA512

      d8a88fb7f2e9eef446535108a933f7cd6463e38ff6e17c9d9619aa757ef3ebd52a7b436e89dd88ea214d4464119c655e717255a41fce173a2d59d26ee180e0da

    • SSDEEP

      12288:yX4yN7a1a8LrehW1VBvuJ5WmpYshXZPbGwidNpgy:yXRa1a2ehCBvuJ5WmD9idNph

    Score
    8/10
    banker

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Requests enabling of the accessibility settings.

    • Tries to add a device administrator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks