Overview

overview

10

Static

static

10

0bc6a18c02...ec.apk

android-9-x86

8

0bc6a18c02...ec.apk

android-10-x64

8

0bc6a18c02...ec.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0bc6a18c026532dfc947353cee8bce13ac60960474aca808786910f09ceedfec.bin

  • Size

    3.1MB

  • Sample

    240226-114vpahe26

  • MD5

    c42b44866924d3108a6ce8f80a5c7bb3

  • SHA1

    fc1ffc20f850acd43d495a086272557b034b6ad9

  • SHA256

    0bc6a18c026532dfc947353cee8bce13ac60960474aca808786910f09ceedfec

  • SHA512

    ed2aacc78c326d9c973334d85a48f0ca107eec9ff83023a05edb4d36ba48f101dbac69911417dd51407f38fa01741d64736dff8182ce708664b7db754b78c98b

  • SSDEEP

    49152:eCIXsZo5EEztRv1E4dG4NWLUaBkmvNZMSw4+sQZoBKnCniDzCWYFQ/YgJPmN:N+rrvcBkei+Q+snCnsfdqN

Score
10/10
spynoteandroidbankerdiscoveryprivilege_escalation

Malware Config

Extracted

Family

spynote

C2

3.6.115.182:15931

Targets

    • Target

      0bc6a18c026532dfc947353cee8bce13ac60960474aca808786910f09ceedfec.bin

    • Size

      3.1MB

    • MD5

      c42b44866924d3108a6ce8f80a5c7bb3

    • SHA1

      fc1ffc20f850acd43d495a086272557b034b6ad9

    • SHA256

      0bc6a18c026532dfc947353cee8bce13ac60960474aca808786910f09ceedfec

    • SHA512

      ed2aacc78c326d9c973334d85a48f0ca107eec9ff83023a05edb4d36ba48f101dbac69911417dd51407f38fa01741d64736dff8182ce708664b7db754b78c98b

    • SSDEEP

      49152:eCIXsZo5EEztRv1E4dG4NWLUaBkmvNZMSw4+sQZoBKnCniDzCWYFQ/YgJPmN:N+rrvcBkei+Q+snCnsfdqN

    Score
    8/10
    bankerdiscoveryprivilege_escalation

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Requests enabling of the accessibility settings.

    • Tries to add a device administrator.

      privilege_escalation
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks