General
-
Target
ready.apk
-
Size
6.2MB
-
Sample
240413-t2r4yseh44
-
MD5
5179baf91fcb305c263ee95285ec265c
-
SHA1
c9e16e18d7f95ab0060cb66de581b861beee7610
-
SHA256
eed6d544a4aa129bdf6e419951d0d1c24970c6459dd823407a6c330b551450de
-
SHA512
3c11511c828e2234b96cb722d9593a9c68b76c0826fdc148b5f8bffff283382e3f0bf01efa023a77ee36d7b6f50f471fd16cc9e74d8c96567aa7c103f2574fa8
-
SSDEEP
24576:8Bn5mosduBj/81BgZSMP9D+SS+u8gGGDWunvZLkbLWR+L:8eos4/87oSMpVDngG/AvZ94
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
ready.apk
Resource
android-x64-arm64-20240221-en
Malware Config
Extracted
spynote
fr1.localto.net:45451
Targets
-
-
Target
ready.apk
-
Size
6.2MB
-
MD5
5179baf91fcb305c263ee95285ec265c
-
SHA1
c9e16e18d7f95ab0060cb66de581b861beee7610
-
SHA256
eed6d544a4aa129bdf6e419951d0d1c24970c6459dd823407a6c330b551450de
-
SHA512
3c11511c828e2234b96cb722d9593a9c68b76c0826fdc148b5f8bffff283382e3f0bf01efa023a77ee36d7b6f50f471fd16cc9e74d8c96567aa7c103f2574fa8
-
SSDEEP
24576:8Bn5mosduBj/81BgZSMP9D+SS+u8gGGDWunvZLkbLWR+L:8eos4/87oSMpVDngG/AvZ94
Score8/10-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Acquires the wake lock
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Hide Artifacts
1User Evasion
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2