Overview

overview

10

Static

static

10

38a0dbb089...54.apk

android-9-x86

8

38a0dbb089...54.apk

android-10-x64

8

38a0dbb089...54.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38a0dbb08991ca26e96f3e48923ce16b0f88f3b808f3ecc0df4178a965f9eb54.bin

  • Size

    783KB

  • Sample

    240216-1yrscagb2y

  • MD5

    3224359cf308788b69c1cfbbd7aa09c5

  • SHA1

    43c99733eb0d7621656e6b72441f24bd7b57f056

  • SHA256

    38a0dbb08991ca26e96f3e48923ce16b0f88f3b808f3ecc0df4178a965f9eb54

  • SHA512

    dacca58bcae846f7a92a3a13cd9547f5937b76898d9d531e5169deba4c904f2cbac389b751d766aac06a0ee6ee8ae7cb571477f12ff290a519777c0dc965b0ff

  • SSDEEP

    12288:m5WmpYshXZPbGwidNpgt6HbM8cOe1o66EtP2V4bjuu:m5WmD9idNpo6HbMth6Ets4br

Score
10/10
spynoteandroidbanker

Malware Config

Extracted

Family

spynote

C2

0.tcp.sa.ngrok.io:12383

Targets

    • Target

      38a0dbb08991ca26e96f3e48923ce16b0f88f3b808f3ecc0df4178a965f9eb54.bin

    • Size

      783KB

    • MD5

      3224359cf308788b69c1cfbbd7aa09c5

    • SHA1

      43c99733eb0d7621656e6b72441f24bd7b57f056

    • SHA256

      38a0dbb08991ca26e96f3e48923ce16b0f88f3b808f3ecc0df4178a965f9eb54

    • SHA512

      dacca58bcae846f7a92a3a13cd9547f5937b76898d9d531e5169deba4c904f2cbac389b751d766aac06a0ee6ee8ae7cb571477f12ff290a519777c0dc965b0ff

    • SSDEEP

      12288:m5WmpYshXZPbGwidNpgt6HbM8cOe1o66EtP2V4bjuu:m5WmD9idNpo6HbMth6Ets4br

    Score
    8/10
    banker

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Requests enabling of the accessibility settings.

    • Tries to add a device administrator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks