Resubmissions

23/05/2024, 12:30

240523-ppqm5shf4v 10

23/05/2024, 12:28

240523-pnqxhshe6y 10

General

  • Target

    Best Sex Positions_2_Apkpure(1).malware

  • Size

    2.3MB

  • MD5

    0781e9dc67ef5cbee09e2243f9facf3a

  • SHA1

    d226e204d3e032a9622ca765161ac0ac5c3128c5

  • SHA256

    9433791f51d70716fc1df65bee0c0f063d71a894ce73ac134d6ad48be2f558fb

  • SHA512

    b2f51996f6414ddccdbe805a4271929c1fcc7fab4f9961b0a53763077765b417fa46dedc3ac3ec727c15d6e318aeb452dc39b1f84c00a84311cb001a54d14bf4

  • SSDEEP

    49152:N02SKFEt0Xq08gnDfrZID407eQZn+tBo4MaLZzuf5Ek9EdSDbd:1Eefbrr+D4MeG8BdMezufp9d

Score
10/10

Malware Config

Extracted

Family

spynote

C2

64.188.24.72:8443

Signatures

  • Spynote family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs

Files

  • Best Sex Positions_2_Apkpure(1).malware
    .apk android

    com.position.sex.aqua

    com.recipes.app.SplashScreen


Android Permissions

Best Sex Positions_2_Apkpure(1).malware

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE