Overview

overview

10

Static

static

10

f4899deba4...27.apk

android-9-x86

8

f4899deba4...27.apk

android-10-x64

8

f4899deba4...27.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4899deba4c9193ef62774942726d413ddad8b8b542a25e44917d0e0e9b76e27.bin

  • Size

    924KB

  • Sample

    240219-1zlygseh68

  • MD5

    4adb46e9622839c17ea578e5ebef1da5

  • SHA1

    f4845776dd5f199ca5f284a6ad6ad72010e428f5

  • SHA256

    f4899deba4c9193ef62774942726d413ddad8b8b542a25e44917d0e0e9b76e27

  • SHA512

    3136fc5e89e165d5106e3aa6fe5b59eaff06b69d8522ff0d40ce0e441ecf1ee7bc2288cb97e1bd1ca17258c9d5c36c5aab6a90f94d6ad1761f9868ec06745f05

  • SSDEEP

    12288:ErrrLgamviiQmxCdgbx3BIsMlBZRvS0qkMgQMhDvoMECQMMCaA:2rfRiXQdgbxxIVlBZRrqdgxRv5ECx9p

Score
10/10
spynoteandroidbankerstealthtrojan

Malware Config

Extracted

Family

spynote

C2

147.185.221.18:38221

Targets

    • Target

      f4899deba4c9193ef62774942726d413ddad8b8b542a25e44917d0e0e9b76e27.bin

    • Size

      924KB

    • MD5

      4adb46e9622839c17ea578e5ebef1da5

    • SHA1

      f4845776dd5f199ca5f284a6ad6ad72010e428f5

    • SHA256

      f4899deba4c9193ef62774942726d413ddad8b8b542a25e44917d0e0e9b76e27

    • SHA512

      3136fc5e89e165d5106e3aa6fe5b59eaff06b69d8522ff0d40ce0e441ecf1ee7bc2288cb97e1bd1ca17258c9d5c36c5aab6a90f94d6ad1761f9868ec06745f05

    • SSDEEP

      12288:ErrrLgamviiQmxCdgbx3BIsMlBZRvS0qkMgQMhDvoMECQMMCaA:2rfRiXQdgbxxIVlBZRrqdgxRv5ECx9p

    Score
    8/10
    bankerstealthtrojan

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Removes its main activity from the application launcher

      stealthtrojan
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks