General

  • Target

    4ba83c85d76425340c66fb75cb42ed6cf60c602dabda33e0814bc048903eab3b.bin

  • Size

    760KB

  • Sample

    240208-1wmqlsda94

  • MD5

    e2c87f3491f789adb7bd264960016e58

  • SHA1

    0dd8fc5dd103b9b7a391342453532b80ce8b627c

  • SHA256

    4ba83c85d76425340c66fb75cb42ed6cf60c602dabda33e0814bc048903eab3b

  • SHA512

    68b79738344d92507273cdeff5e04289b3fb1bcd638d59f57ee1c9d50a1d5393fb87382695951f8f3e67d10b24024df04114b994853a6e729a3dfbddd4914e25

  • SSDEEP

    12288:94v3krNp1rVOeQzLuJN0IPI0hXcWha1a8LVegtc:9trNpVRQzLuJN0ythMWha1aKeUc

Malware Config

Extracted

Family

spynote

C2

105.105.194.126:1177

Targets

    • Target

      4ba83c85d76425340c66fb75cb42ed6cf60c602dabda33e0814bc048903eab3b.bin

    • Size

      760KB

    • MD5

      e2c87f3491f789adb7bd264960016e58

    • SHA1

      0dd8fc5dd103b9b7a391342453532b80ce8b627c

    • SHA256

      4ba83c85d76425340c66fb75cb42ed6cf60c602dabda33e0814bc048903eab3b

    • SHA512

      68b79738344d92507273cdeff5e04289b3fb1bcd638d59f57ee1c9d50a1d5393fb87382695951f8f3e67d10b24024df04114b994853a6e729a3dfbddd4914e25

    • SSDEEP

      12288:94v3krNp1rVOeQzLuJN0IPI0hXcWha1a8LVegtc:9trNpVRQzLuJN0ythMWha1aKeUc

    Score
    8/10
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Removes its main activity from the application launcher

MITRE ATT&CK Matrix

Tasks