Overview

overview

10

Static

static

10

a08c90084d...12.apk

android-9-x86

8

a08c90084d...12.apk

android-10-x64

8

a08c90084d...12.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a08c90084dbe95d8e9837977a10a04421b1ff5f7f4efac3bea2b997a91013d12.bin

  • Size

    760KB

  • Sample

    240324-1xkmmshb38

  • MD5

    fd28bc33fdad7dd66ea665dea640f148

  • SHA1

    79ce4612a281229e8aea05c1e65e1387e8f14d82

  • SHA256

    a08c90084dbe95d8e9837977a10a04421b1ff5f7f4efac3bea2b997a91013d12

  • SHA512

    ffb43e7e3076ee636ea590d0a448b06a8f9950f102cf15af19eb71d62c94224f4c0db7fd9e06f4ed72bc43117820f1376de221ac9ad4212122fea6147048c785

  • SSDEEP

    12288:N/D+za1a8Lde3zbz73HUm5WmpYshXZPbGwidNpgZ:N/aa1a6e3z73Um5WmD9idNpO

Score
10/10
spynoteandroidbankerdiscoveryevasionpersistenceprivilege_escalation

Malware Config

Extracted

Family

spynote

C2

0.tcp.eu.ngrok.io:17895

Targets

    • Target

      a08c90084dbe95d8e9837977a10a04421b1ff5f7f4efac3bea2b997a91013d12.bin

    • Size

      760KB

    • MD5

      fd28bc33fdad7dd66ea665dea640f148

    • SHA1

      79ce4612a281229e8aea05c1e65e1387e8f14d82

    • SHA256

      a08c90084dbe95d8e9837977a10a04421b1ff5f7f4efac3bea2b997a91013d12

    • SHA512

      ffb43e7e3076ee636ea590d0a448b06a8f9950f102cf15af19eb71d62c94224f4c0db7fd9e06f4ed72bc43117820f1376de221ac9ad4212122fea6147048c785

    • SSDEEP

      12288:N/D+za1a8Lde3zbz73HUm5WmpYshXZPbGwidNpgZ:N/aa1a6e3z73Um5WmD9idNpO

    Score
    8/10
    bankerdiscoveryevasionpersistenceprivilege_escalation

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      evasionpersistence

    • Requests enabling of the accessibility settings.

    • Tries to add a device administrator.

      privilege_escalation
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks