Overview

overview

10

Static

static

10

c205749c08...29.apk

android-9-x86

7

c205749c08...29.apk

android-10-x64

7

c205749c08...29.apk

android-11-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c205749c0845e58842eb4f7c851741215bb4ca886b4af6ee6776e48ad8ffd129.bin

  • Size

    860KB

  • Sample

    240523-1wxktaad81

  • MD5

    4698cf50175befa88bf69de3e9d8fbee

  • SHA1

    d56774a07e76102e347ebe18868dca9ce3ca9910

  • SHA256

    c205749c0845e58842eb4f7c851741215bb4ca886b4af6ee6776e48ad8ffd129

  • SHA512

    feb112a56f0335a5007e45f56bc2484dff884173514d093d7c534d22224d129837be7ae5efa5d016ca22e6fd93d722dde1c92101ce122c05f85c7d5b3a8ae9c6

  • SSDEEP

    24576:ALXbSiBU23fon4mEB4eX64vv08xIK7LQhc+cxk:APSi4mX6430GT7ecq

Score
10/10
spynoteandroidevasionexecutionpersistence

Malware Config

Extracted

Family

spynote

C2

8.tcp.eu.ngrok.io:22112

Targets

    • Target

      c205749c0845e58842eb4f7c851741215bb4ca886b4af6ee6776e48ad8ffd129.bin

    • Size

      860KB

    • MD5

      4698cf50175befa88bf69de3e9d8fbee

    • SHA1

      d56774a07e76102e347ebe18868dca9ce3ca9910

    • SHA256

      c205749c0845e58842eb4f7c851741215bb4ca886b4af6ee6776e48ad8ffd129

    • SHA512

      feb112a56f0335a5007e45f56bc2484dff884173514d093d7c534d22224d129837be7ae5efa5d016ca22e6fd93d722dde1c92101ce122c05f85c7d5b3a8ae9c6

    • SSDEEP

      24576:ALXbSiBU23fon4mEB4eX64vv08xIK7LQhc+cxk:APSi4mX6430GT7ecq

    Score
    7/10
    evasionexecutionpersistence

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Schedules tasks to execute at a specified time

      Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

      executionpersistence
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks