Overview

overview

10

Static

static

10

4c8f03d7af...74.apk

android-9-x86

8

4c8f03d7af...74.apk

android-10-x64

8

4c8f03d7af...74.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c8f03d7afd52711ff200eb1a4a6b2314b9d4b28042421b65edeb68ab5828f74.bin

  • Size

    760KB

  • Sample

    240216-1xpxcsge93

  • MD5

    5268312343bed66a564b09563bea9801

  • SHA1

    397b65c554c1569c7972254354d277bef5532bd9

  • SHA256

    4c8f03d7afd52711ff200eb1a4a6b2314b9d4b28042421b65edeb68ab5828f74

  • SHA512

    79179af880f44b61f3c805f3745929df194004387adf9395da4eea0fc8fc3a4408c416e5187b0fc26497abaad90d1b5b8b3aee74c3e514d1755bac5a359e10b0

  • SSDEEP

    12288:gyOVn+C8Ydfa1a8LzeADzUWuG25WmpYshXZPbGwidNpgyy:g7R1fa1ameAUWuG25WmD9idNpO

Score
10/10
spynoteandroidbanker

Malware Config

Extracted

Family

spynote

C2

agam.ddns.net:22

Targets

    • Target

      4c8f03d7afd52711ff200eb1a4a6b2314b9d4b28042421b65edeb68ab5828f74.bin

    • Size

      760KB

    • MD5

      5268312343bed66a564b09563bea9801

    • SHA1

      397b65c554c1569c7972254354d277bef5532bd9

    • SHA256

      4c8f03d7afd52711ff200eb1a4a6b2314b9d4b28042421b65edeb68ab5828f74

    • SHA512

      79179af880f44b61f3c805f3745929df194004387adf9395da4eea0fc8fc3a4408c416e5187b0fc26497abaad90d1b5b8b3aee74c3e514d1755bac5a359e10b0

    • SSDEEP

      12288:gyOVn+C8Ydfa1a8LzeADzUWuG25WmpYshXZPbGwidNpgyy:g7R1fa1ameAUWuG25WmD9idNpO

    Score
    8/10
    banker

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Requests enabling of the accessibility settings.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks