General

  • Target

    client.apk

  • Size

    807KB

  • MD5

    c91b968b11bb2ac894739c48d7ca9aad

  • SHA1

    7e5ade3831be1a3eb03bcc8d0abdb407118379b2

  • SHA256

    ea9d481ce2c87fb6190d69533cddac9704800842a33465aab1186419440b2f15

  • SHA512

    97e25b68a205a80cd1fb31a32ecc872e6c475a60f4b81c36b37eb2a5c57dcfbc9023f40bba442e531ce7deb3afe4ade4998baba1aec0e981aa2beb5892dc0e9c

  • SSDEEP

    12288:OGPRulAkACIrK7Z0C9HDrdvhj3KGLaD26C9XgqRCIlNE8Z6GvhZT:rQp7IrKuC9HdvhjKeaDnG5Zv

Score
10/10

Malware Config

Signatures

  • Spynote family
  • Spynote payload 1 IoCs
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 20 IoCs

Files

  • client.apk
    .apk android

    yps.eton.application

    yps.eton.application.M


Android Permissions

client.apk

Permissions

android.permission.CAMERA

android.permission.BLUETOOTH

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.SEND_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.VIBRATE

android.permission.CAMERA

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_CONTACTS

android.permission.READ_CONTACTS

android.permission.RECORD_AUDIO

android.permission.READ_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_CALL_LOG

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INSTALL_PACKAGES

android.permission.PROCESS_OUTGOING_CALLS