Overview

overview

10

Static

static

10

11a6e69016...92.apk

android-9-x86

8

11a6e69016...92.apk

android-10-x64

8

11a6e69016...92.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11a6e69016c8466c1c742005daa6fa7933d68648ad0035107dd981b584218292.bin

  • Size

    774KB

  • Sample

    240206-1ww92sbbbj

  • MD5

    f4d5c13f5bbd8a2a229c3aec7b67de50

  • SHA1

    5c7f7216ea3b40c0e0baafce55ad938f8c300b43

  • SHA256

    11a6e69016c8466c1c742005daa6fa7933d68648ad0035107dd981b584218292

  • SHA512

    935974ccd3ca8bedfa5bf0a8946b0adad24db2c0a4d34433de7d6d80f9a294a71f8df4408dd44a87ac3189d6074cfd0f120f55f9ea0eb8f0a4610499a9c98574

  • SSDEEP

    24576:XyQEa1a6eNbL/TYqt5nP5WmD9idNpfHDKA:aa1albYiWk0d/h

Score
10/10
spynoteandroidbanker

Malware Config

Extracted

Family

spynote

C2

nervous-pond-08082.pktriot.net:22292

Targets

    • Target

      11a6e69016c8466c1c742005daa6fa7933d68648ad0035107dd981b584218292.bin

    • Size

      774KB

    • MD5

      f4d5c13f5bbd8a2a229c3aec7b67de50

    • SHA1

      5c7f7216ea3b40c0e0baafce55ad938f8c300b43

    • SHA256

      11a6e69016c8466c1c742005daa6fa7933d68648ad0035107dd981b584218292

    • SHA512

      935974ccd3ca8bedfa5bf0a8946b0adad24db2c0a4d34433de7d6d80f9a294a71f8df4408dd44a87ac3189d6074cfd0f120f55f9ea0eb8f0a4610499a9c98574

    • SSDEEP

      24576:XyQEa1a6eNbL/TYqt5nP5WmD9idNpfHDKA:aa1albYiWk0d/h

    Score
    8/10
    banker

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Requests enabling of the accessibility settings.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks