Overview

overview

10

Static

static

10

b5ec779f9d...2a.apk

android-9-x86

8

b5ec779f9d...2a.apk

android-10-x64

8

b5ec779f9d...2a.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5ec779f9d7480469261914029142828229927db0dbf9f5d4ea1bd655406d42a.bin

  • Size

    760KB

  • Sample

    240305-1zk17aag7t

  • MD5

    9862d6c9d0ae631645b577bdd3084261

  • SHA1

    3ddfd4615db0a919dcf9a0aa4ee848d64ba8cfbc

  • SHA256

    b5ec779f9d7480469261914029142828229927db0dbf9f5d4ea1bd655406d42a

  • SHA512

    e002f04844a3bb2a94a3fe8c76bb9725b999a0209040765d124fbfba2e8acc54f9bca760d9752f2a9f5978a8aafe35a7aeaf4f98d0c877e2dba7f5ccdd09c746

  • SSDEEP

    12288:ViG/WBJ6sgR8LzV4NsrCkX5WmpYshXZPbGwidNpgD+:cJ6s1LzVlrCkX5WmD9idNpR

Score
10/10
spynoteandroidbankerdiscoveryprivilege_escalation

Malware Config

Extracted

Family

spynote

C2

162.243.165.183:4444

Targets

    • Target

      b5ec779f9d7480469261914029142828229927db0dbf9f5d4ea1bd655406d42a.bin

    • Size

      760KB

    • MD5

      9862d6c9d0ae631645b577bdd3084261

    • SHA1

      3ddfd4615db0a919dcf9a0aa4ee848d64ba8cfbc

    • SHA256

      b5ec779f9d7480469261914029142828229927db0dbf9f5d4ea1bd655406d42a

    • SHA512

      e002f04844a3bb2a94a3fe8c76bb9725b999a0209040765d124fbfba2e8acc54f9bca760d9752f2a9f5978a8aafe35a7aeaf4f98d0c877e2dba7f5ccdd09c746

    • SSDEEP

      12288:ViG/WBJ6sgR8LzV4NsrCkX5WmpYshXZPbGwidNpgD+:cJ6s1LzVlrCkX5WmD9idNpR

    Score
    8/10
    bankerdiscoveryprivilege_escalation

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Requests enabling of the accessibility settings.

    • Tries to add a device administrator.

      privilege_escalation
    behavioral1behavioral2behavioral3

MITRE ATT&CK Mobile v15

Tasks