General

  • Target

    facebook-lite-397-0-0-11-117_Jected.apk

  • Size

    2.8MB

  • Sample

    240310-w588rahh59

  • MD5

    23103104118572b26a76c9e71a748b3f

  • SHA1

    8b4b2c7523113e0311433b1eb6dfa49fe2448a10

  • SHA256

    6c9e883f64c3b952a165293b4998655dc43224fe7665a9af3d8457e18a17d02e

  • SHA512

    68d28455256b0c2208be083d1eb3f92ff0c44ea9210a98878447c9e6ea0dbe59ffee7a0cbbb3632d791cd784d45ababd8c95ec1d5bf86cf70e9ac5f01e95aecd

  • SSDEEP

    49152:QZ9x4x3LVIOKMIvW6H05YWCZEii7Id16ugo2iO4Ky/PR2mj31iW1fXuMOXKGY+Tq:Q67GtTW6vn6FId12o2CKG9T1iW1vgaGi

Malware Config

Extracted

Family

spynote

C2

jijofi4973-34815.portmap.host:34815

Targets

    • Target

      facebook-lite-397-0-0-11-117_Jected.apk

    • Size

      2.8MB

    • MD5

      23103104118572b26a76c9e71a748b3f

    • SHA1

      8b4b2c7523113e0311433b1eb6dfa49fe2448a10

    • SHA256

      6c9e883f64c3b952a165293b4998655dc43224fe7665a9af3d8457e18a17d02e

    • SHA512

      68d28455256b0c2208be083d1eb3f92ff0c44ea9210a98878447c9e6ea0dbe59ffee7a0cbbb3632d791cd784d45ababd8c95ec1d5bf86cf70e9ac5f01e95aecd

    • SSDEEP

      49152:QZ9x4x3LVIOKMIvW6H05YWCZEii7Id16ugo2iO4Ky/PR2mj31iW1fXuMOXKGY+Tq:Q67GtTW6vn6FId12o2CKG9T1iW1vgaGi

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads the content of photos stored on the user's device.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks