Overview

overview

10

Static

static

10

3e6a03a6cb...99.apk

android-9-x86

8

3e6a03a6cb...99.apk

android-10-x64

8

3e6a03a6cb...99.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e6a03a6cbf3fc823a44efcad0d761bf881919ea3299efc3b8ccc3d9d419c199.bin

  • Size

    760KB

  • Sample

    240220-1wnmxafd91

  • MD5

    a966f0b67527bc0c16e5198b956d143c

  • SHA1

    025721277d8dbcf74c062df45a8bcfb4b6b0ec1d

  • SHA256

    3e6a03a6cbf3fc823a44efcad0d761bf881919ea3299efc3b8ccc3d9d419c199

  • SHA512

    365bd1a3a6bcb38bf790e5a3121a704021724fbab555e424ca10995114ae0cafde34e765d029b569b6c55ab380fdba64478a93b340bba2be6a1e7e464118fa73

  • SSDEEP

    12288:ZpMH8a1a8Lreac4kiN3u5WmpYshXZPbGwidNpgF:Zp7a1a2eaOiN3u5WmD9idNpm

Score
10/10
spynoteandroidbankerstealthtrojan

Malware Config

Extracted

Family

spynote

C2

147.185.221.17:31414

Targets

    • Target

      3e6a03a6cbf3fc823a44efcad0d761bf881919ea3299efc3b8ccc3d9d419c199.bin

    • Size

      760KB

    • MD5

      a966f0b67527bc0c16e5198b956d143c

    • SHA1

      025721277d8dbcf74c062df45a8bcfb4b6b0ec1d

    • SHA256

      3e6a03a6cbf3fc823a44efcad0d761bf881919ea3299efc3b8ccc3d9d419c199

    • SHA512

      365bd1a3a6bcb38bf790e5a3121a704021724fbab555e424ca10995114ae0cafde34e765d029b569b6c55ab380fdba64478a93b340bba2be6a1e7e464118fa73

    • SSDEEP

      12288:ZpMH8a1a8Lreac4kiN3u5WmpYshXZPbGwidNpgF:Zp7a1a2eaOiN3u5WmD9idNpm

    Score
    8/10
    bankerstealthtrojan

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Removes its main activity from the application launcher

      stealthtrojan
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks