Overview

overview

10

Static

static

10

bc71d67660...c6.apk

android-9-x86

8

bc71d67660...c6.apk

android-10-x64

8

bc71d67660...c6.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc71d6766097bce20cb2f2b2834bcc15f87cd7b8949ca6e5827b1db25e1fc7c6.bin

  • Size

    760KB

  • Sample

    240218-1wnynsfa6s

  • MD5

    d1daf66466b7310194c4c4189cf8f914

  • SHA1

    c17b59e375190257a760450c91c4efea65dc98b1

  • SHA256

    bc71d6766097bce20cb2f2b2834bcc15f87cd7b8949ca6e5827b1db25e1fc7c6

  • SHA512

    35c9ae870959bbd5d2ebf382a0a4fe70c328fd948e87f395d0ed8f8871021490e09bed5c6e0420ba8abbd2fbfc64408b38477f7f4a2fe29de7ece25a9836a2fe

  • SSDEEP

    12288:WDm8xiza1a8LzejFjs5dC85WmpYshXZPbGwidNpg0z:WIza1amejG5dC85WmD9idNph

Score
10/10
spynoteandroidbanker

Malware Config

Extracted

Family

spynote

C2

proud-fire-00711.pktriot.net:22472

Targets

    • Target

      bc71d6766097bce20cb2f2b2834bcc15f87cd7b8949ca6e5827b1db25e1fc7c6.bin

    • Size

      760KB

    • MD5

      d1daf66466b7310194c4c4189cf8f914

    • SHA1

      c17b59e375190257a760450c91c4efea65dc98b1

    • SHA256

      bc71d6766097bce20cb2f2b2834bcc15f87cd7b8949ca6e5827b1db25e1fc7c6

    • SHA512

      35c9ae870959bbd5d2ebf382a0a4fe70c328fd948e87f395d0ed8f8871021490e09bed5c6e0420ba8abbd2fbfc64408b38477f7f4a2fe29de7ece25a9836a2fe

    • SSDEEP

      12288:WDm8xiza1a8LzejFjs5dC85WmpYshXZPbGwidNpg0z:WIza1amejG5dC85WmD9idNph

    Score
    8/10
    banker

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Requests enabling of the accessibility settings.

    • Tries to add a device administrator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks