Overview

overview

10

Static

static

10

d9bda0ab6d...7d.apk

android-9-x86

8

d9bda0ab6d...7d.apk

android-10-x64

8

d9bda0ab6d...7d.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9bda0ab6dfee51baeba25931819c8b2aed4d1d09d30a4953357a1d5979fcd7d.bin

  • Size

    760KB

  • Sample

    240215-1x98asaf27

  • MD5

    788ae35d0b3819934b750349c3f30c3f

  • SHA1

    d46cd254d2881da614256a41a0a7dd616f6117b3

  • SHA256

    d9bda0ab6dfee51baeba25931819c8b2aed4d1d09d30a4953357a1d5979fcd7d

  • SHA512

    cd81554dc5d8d59d1c45803edd5201fa14761499bcf12ab2a258be8f8cabe943364cc26f1d7339f1af365d75232e8e20b4725a8fde673b8007e9d2213f500508

  • SSDEEP

    12288:/mOyEUJ6sgRALzcFMXpl7uy15WmpYshXZPbGwidNpg5:/nOJ6s7LzcQpluy15WmD9idNp2

Score
10/10
spynoteandroidbanker

Malware Config

Extracted

Family

spynote

C2

192.168.30.211:4444

Targets

    • Target

      d9bda0ab6dfee51baeba25931819c8b2aed4d1d09d30a4953357a1d5979fcd7d.bin

    • Size

      760KB

    • MD5

      788ae35d0b3819934b750349c3f30c3f

    • SHA1

      d46cd254d2881da614256a41a0a7dd616f6117b3

    • SHA256

      d9bda0ab6dfee51baeba25931819c8b2aed4d1d09d30a4953357a1d5979fcd7d

    • SHA512

      cd81554dc5d8d59d1c45803edd5201fa14761499bcf12ab2a258be8f8cabe943364cc26f1d7339f1af365d75232e8e20b4725a8fde673b8007e9d2213f500508

    • SSDEEP

      12288:/mOyEUJ6sgRALzcFMXpl7uy15WmpYshXZPbGwidNpg5:/nOJ6s7LzcQpluy15WmD9idNp2

    Score
    8/10
    banker

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Requests enabling of the accessibility settings.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks