General

  • Target

    ba2325b5ef9efff5701926bc90306f0e9aba435203455ec12df277709ced606c

  • Size

    23.2MB

  • MD5

    71cb1cf1b66e54bac2750a39dc17fe3c

  • SHA1

    d5dd786dc4bcff2c8ed1881538327cccfe5760c8

  • SHA256

    ba2325b5ef9efff5701926bc90306f0e9aba435203455ec12df277709ced606c

  • SHA512

    d40e5c78ac5cd3aaf2daf8cc71acaaaed578f29548491b74c47a6d049cab92a73b251e68193d0ef629189128bbdc2740699633b53aa87fda43ee90d05a4b5c41

  • SSDEEP

    393216:QH+XL7yhqkAm3tslDatBs3vbGL8XNZnpJWpcjNvIdCM+OSJfT57Yyl4K6TQeqv:ZXNk3+lFpTJWpivdvV34KV5v

Score
10/10

Malware Config

Extracted

Family

spinok

C2

https://d3hdbjtb1686tn.cloudfront.net/gpsdk.html

Signatures

  • Spinok family
  • Requests dangerous framework permissions 7 IoCs

Files

  • ba2325b5ef9efff5701926bc90306f0e9aba435203455ec12df277709ced606c
    .apk android

    com.reweize.android

    com.reweize.android.Splash


Android Permissions

ba2325b5ef9efff5701926bc90306f0e9aba435203455ec12df277709ced606c

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

com.google.android.gms.permission.AD_ID

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.BLUETOOTH_CONNECT

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.BLUETOOTH

android.permission.PACKAGE_USAGE_STATS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

android.permission.GET_TASKS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE