Overview

overview

10

Static

static

10

fb5594db77...cf.apk

android-9-x86

8

fb5594db77...cf.apk

android-10-x64

8

fb5594db77...cf.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb5594db778a1457fc478168a39ed4d33867870cc7b5a8ff77534cea92eb03cf.bin

  • Size

    760KB

  • Sample

    240220-1y1p9afe7z

  • MD5

    88c1b3723a3d9bf5ef9cdde457ec23ea

  • SHA1

    79874a20dbd2b1cb59818171a4ac923e54cbf4be

  • SHA256

    fb5594db778a1457fc478168a39ed4d33867870cc7b5a8ff77534cea92eb03cf

  • SHA512

    0551b40e261046f1b75bcb68519763f7a24e432355e821fa36eaec99ddaedcce1bb132eeb228ab8a3263516e792cb0a2f8d6f8debbea88a0ed3ccbb982619640

  • SSDEEP

    12288:Nbbe/a1a8LzeHRDsxV6s5WmpYshXZPbGwidNpgHB:Noa1ameHCxV6s5WmD9idNpu

Score
10/10
spynoteandroidbanker

Malware Config

Extracted

Family

spynote

C2

18.ip.gl.ply.gg:16466

Targets

    • Target

      fb5594db778a1457fc478168a39ed4d33867870cc7b5a8ff77534cea92eb03cf.bin

    • Size

      760KB

    • MD5

      88c1b3723a3d9bf5ef9cdde457ec23ea

    • SHA1

      79874a20dbd2b1cb59818171a4ac923e54cbf4be

    • SHA256

      fb5594db778a1457fc478168a39ed4d33867870cc7b5a8ff77534cea92eb03cf

    • SHA512

      0551b40e261046f1b75bcb68519763f7a24e432355e821fa36eaec99ddaedcce1bb132eeb228ab8a3263516e792cb0a2f8d6f8debbea88a0ed3ccbb982619640

    • SSDEEP

      12288:Nbbe/a1a8LzeHRDsxV6s5WmpYshXZPbGwidNpgHB:Noa1ameHCxV6s5WmD9idNpu

    Score
    8/10
    banker

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Requests enabling of the accessibility settings.

    • Tries to add a device administrator.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks