General

  • Target

    6698bc1764538c832092c6c6e4f25960e3d5ac7ff4926ffc8eb47500b13cdf7f

  • Size

    17.5MB

  • MD5

    39d0453c4f8c2356a5a920629ca34155

  • SHA1

    a6e45ef998894ae1f1b3340467e5a7a0f66caaae

  • SHA256

    6698bc1764538c832092c6c6e4f25960e3d5ac7ff4926ffc8eb47500b13cdf7f

  • SHA512

    954903c3a0db40b1d2013fe4baf553b16406f1578cfca5b9bd068819188448438326ba57c119743f5f9be0edf358e4894d129acf2f6b03407fc9bb33a3e58988

  • SSDEEP

    393216:6YfzZRHzfVUOSJNTAHwlj/OhHSCAwQgVQMli+/FS1QwA7vhcDBeWT:DfrfS3TAQljWhHSgQgVQMlimFmNIcDf

Score
10/10

Malware Config

Extracted

Family

spinok

C2

https://d3hdbjtb1686tn.cloudfront.net/gpsdk.html

Signatures

  • Spinok family
  • Requests dangerous framework permissions 3 IoCs

Files

  • 6698bc1764538c832092c6c6e4f25960e3d5ac7ff4926ffc8eb47500b13cdf7f
    .apk android

    com.digiwards.wepointz

    com.digiwards.wepointz.LoginActivity


Android Permissions

6698bc1764538c832092c6c6e4f25960e3d5ac7ff4926ffc8eb47500b13cdf7f

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

com.google.android.c2dm.permission.RECEIVE

android.permission.VIBRATE

com.google.android.gms.permission.AD_ID

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.PACKAGE_USAGE_STATS

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE