Overview

overview

10

Static

static

10

5afc8e920c...1a.apk

android-9-x86

8

5afc8e920c...1a.apk

android-10-x64

8

5afc8e920c...1a.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5afc8e920cca06fecac363b73a702af6e6bf6ee587ad4e5a7b90ef3769f51f1a.bin

  • Size

    744KB

  • Sample

    240210-1xg7hsbc32

  • MD5

    80d14dd90d5d4dc52259f2c39fb2b7cf

  • SHA1

    952c641a75169bb81b84ca12e3157665c3ae08fd

  • SHA256

    5afc8e920cca06fecac363b73a702af6e6bf6ee587ad4e5a7b90ef3769f51f1a

  • SHA512

    62d39e231d3b290a5feb611c0be46d77aa50034b03eed48f4083a058669ca2f79d91e1706a6102915d03f64b1cafb7a88595039278a57d4f570bd13c60b3ea8f

  • SSDEEP

    12288:tsZmRGkBX0yh2+x6FQppUatg2gxn0cD6gJP1jCjIsn:tsZmJSywW6KTUatg2G16gJPojIsn

Score
10/10
spynoteandroidbanker

Malware Config

Extracted

Family

spynote

C2

192.168.1.102:443

Targets

    • Target

      5afc8e920cca06fecac363b73a702af6e6bf6ee587ad4e5a7b90ef3769f51f1a.bin

    • Size

      744KB

    • MD5

      80d14dd90d5d4dc52259f2c39fb2b7cf

    • SHA1

      952c641a75169bb81b84ca12e3157665c3ae08fd

    • SHA256

      5afc8e920cca06fecac363b73a702af6e6bf6ee587ad4e5a7b90ef3769f51f1a

    • SHA512

      62d39e231d3b290a5feb611c0be46d77aa50034b03eed48f4083a058669ca2f79d91e1706a6102915d03f64b1cafb7a88595039278a57d4f570bd13c60b3ea8f

    • SSDEEP

      12288:tsZmRGkBX0yh2+x6FQppUatg2gxn0cD6gJP1jCjIsn:tsZmJSywW6KTUatg2G16gJPojIsn

    Score
    8/10
    banker

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks