Overview

overview

10

Static

static

10

ready.apk

android-9-x86

8

ready.apk

android-10-x64

8

ready.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ready.apk

  • Size

    672KB

  • Sample

    240122-1tfvaadebm

  • MD5

    5b0003f522d2d02eba7eb4e854069222

  • SHA1

    f8b9a8b89fad9cbcdc2ed502cf8bdc797bd2082e

  • SHA256

    503ea875c6a93f7e221436915faa2d2bffa512d2b803f0802f5dd4e408a641b7

  • SHA512

    df05d01017cd9a1cbb4fb6a6410d3f740c2b5474f84052bd760fc9a1d68129b4d8e2948618c62bcaf1cdb497429b8249d74e289c6413119b0b4ca3eaa06196c6

  • SSDEEP

    12288:Iwlbo9GgLRBWItYYyow7HCgI4joWbZ/vXbQKS+WGZ6Rq21ZgO75UeM:IwlfglBWItYYjwjCgI4jl/vXbQtFUGNS

Score
10/10
spynoteandroidevasionstealthtrojan

Malware Config

Extracted

Family

spynote

C2

176.150.69.221:42474

Targets

    • Target

      ready.apk

    • Size

      672KB

    • MD5

      5b0003f522d2d02eba7eb4e854069222

    • SHA1

      f8b9a8b89fad9cbcdc2ed502cf8bdc797bd2082e

    • SHA256

      503ea875c6a93f7e221436915faa2d2bffa512d2b803f0802f5dd4e408a641b7

    • SHA512

      df05d01017cd9a1cbb4fb6a6410d3f740c2b5474f84052bd760fc9a1d68129b4d8e2948618c62bcaf1cdb497429b8249d74e289c6413119b0b4ca3eaa06196c6

    • SSDEEP

      12288:Iwlbo9GgLRBWItYYyow7HCgI4joWbZ/vXbQKS+WGZ6Rq21ZgO75UeM:IwlfglBWItYYjwjCgI4jl/vXbQtFUGNS

    Score
    8/10
    evasionstealthtrojan

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Removes its main activity from the application launcher

      stealthtrojan

    • Requests enabling of the accessibility settings.

    • Acquires the wake lock

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks