Overview

overview

10

Static

static

10

79672a093c...7e.apk

android-9-x86

8

79672a093c...7e.apk

android-10-x64

8

79672a093c...7e.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79672a093c5fbe849f77f05a63c9ff2815b52b7c351a20b35d124ac1a86c9b7e.bin

  • Size

    783KB

  • Sample

    240216-1yvt1agb21

  • MD5

    11908636ed9f16e671a1f05c18eac25e

  • SHA1

    42e4c8b5264e267ac7a7bc456137ef646435b0de

  • SHA256

    79672a093c5fbe849f77f05a63c9ff2815b52b7c351a20b35d124ac1a86c9b7e

  • SHA512

    70ab141794f6d12307f3d7bb0416dc255a56c6ede99d5fbf36e6b0f3a4deeb4e8ebcfff81dde7e28c86415e556529608c8fc23fd4546153a0c4fa9f8e9b5b0f9

  • SSDEEP

    12288:m5WmpYshXZPbGwidNpgt6HbM8cOe1oai6EtP2V4kuW:m5WmD9idNpo6HbMtVi6Ets4o

Score
10/10
spynoteandroidbanker

Malware Config

Extracted

Family

spynote

C2

127.0.0.1:12383

Targets

    • Target

      79672a093c5fbe849f77f05a63c9ff2815b52b7c351a20b35d124ac1a86c9b7e.bin

    • Size

      783KB

    • MD5

      11908636ed9f16e671a1f05c18eac25e

    • SHA1

      42e4c8b5264e267ac7a7bc456137ef646435b0de

    • SHA256

      79672a093c5fbe849f77f05a63c9ff2815b52b7c351a20b35d124ac1a86c9b7e

    • SHA512

      70ab141794f6d12307f3d7bb0416dc255a56c6ede99d5fbf36e6b0f3a4deeb4e8ebcfff81dde7e28c86415e556529608c8fc23fd4546153a0c4fa9f8e9b5b0f9

    • SSDEEP

      12288:m5WmpYshXZPbGwidNpgt6HbM8cOe1oai6EtP2V4kuW:m5WmD9idNpo6HbMtVi6Ets4o

    Score
    8/10
    banker

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Requests enabling of the accessibility settings.

    • Tries to add a device administrator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks