Overview

overview

10

Static

static

10

50d9d3d91b...6e.apk

android-9-x86

8

50d9d3d91b...6e.apk

android-10-x64

8

50d9d3d91b...6e.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    50d9d3d91bd584249700907fa6e74a9e1fd89d6690b713ec8ac0df83c7d0326e.bin

  • Size

    768KB

  • Sample

    240218-1xc8kafd42

  • MD5

    5f8562a508568ad35734b292e68fe1fe

  • SHA1

    93bfbf2fb22717cf8d569ae33010699fc3e35d7c

  • SHA256

    50d9d3d91bd584249700907fa6e74a9e1fd89d6690b713ec8ac0df83c7d0326e

  • SHA512

    d7064895c1f44051814b83d2d1adb3ba8fbd01d5ead1261a1330e23c77afca16e215f986b12ace05dedd3ab1d5b6d9086ef24d17010a40d2f4cc5ce951ebd29f

  • SSDEEP

    12288:Qiaoj8VTCyPTTZzOhULX6BZRvS0q/193T6k8H:QfoQVuyPTpOMqBZRrq/fT6kO

Score
10/10
spynoteandroidbankerstealthtrojan

Malware Config

Extracted

Family

spynote

C2

147.185.221.16:54299

Targets

    • Target

      50d9d3d91bd584249700907fa6e74a9e1fd89d6690b713ec8ac0df83c7d0326e.bin

    • Size

      768KB

    • MD5

      5f8562a508568ad35734b292e68fe1fe

    • SHA1

      93bfbf2fb22717cf8d569ae33010699fc3e35d7c

    • SHA256

      50d9d3d91bd584249700907fa6e74a9e1fd89d6690b713ec8ac0df83c7d0326e

    • SHA512

      d7064895c1f44051814b83d2d1adb3ba8fbd01d5ead1261a1330e23c77afca16e215f986b12ace05dedd3ab1d5b6d9086ef24d17010a40d2f4cc5ce951ebd29f

    • SSDEEP

      12288:Qiaoj8VTCyPTTZzOhULX6BZRvS0q/193T6k8H:QfoQVuyPTpOMqBZRrq/fT6kO

    Score
    8/10
    bankerstealthtrojan

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Removes its main activity from the application launcher

      stealthtrojan
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks