Resubmissions

08-03-2024 17:45

240308-wbwqkadf8w 10

General

  • Target

    ready.apk

  • Size

    3.7MB

  • Sample

    240308-wbwqkadf8w

  • MD5

    df0ae466772a630821cf9bda4245ee86

  • SHA1

    d9e849b0a73a834a7dfa7f4329a4969bc866128c

  • SHA256

    c7d2e0dafed1ab1982733fba81f0e14825d1e1ba841005f48d8ad2f440d142cb

  • SHA512

    4f700bba4550ce103570d2d50a718da64436b449de4552918052f731eec2f8eb22a6059b24bcde72a9d3e227eeb71c9cb48143429735a40541a594fb4222e897

  • SSDEEP

    98304:CthbcOMS7VzhUOrBtjxmcHGmzjzBCTn0tgzH6:CfbkSRdUWtjxpxzg4z

Malware Config

Extracted

Family

spynote

C2

193.148.18.54:8443

Targets

    • Target

      ready.apk

    • Size

      3.7MB

    • MD5

      df0ae466772a630821cf9bda4245ee86

    • SHA1

      d9e849b0a73a834a7dfa7f4329a4969bc866128c

    • SHA256

      c7d2e0dafed1ab1982733fba81f0e14825d1e1ba841005f48d8ad2f440d142cb

    • SHA512

      4f700bba4550ce103570d2d50a718da64436b449de4552918052f731eec2f8eb22a6059b24bcde72a9d3e227eeb71c9cb48143429735a40541a594fb4222e897

    • SSDEEP

      98304:CthbcOMS7VzhUOrBtjxmcHGmzjzBCTn0tgzH6:CfbkSRdUWtjxpxzg4z

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Requests enabling of the accessibility settings.

    • Acquires the wake lock

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks