cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098.zip
- SHA256 ef37672b2f7594b56baf63c90c155ee32f4e2fd74116824ea6a5e1579dda4af8
Password
infected
Behavioral task
behavioral1
Sample
cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098.apk
Resource
android-x86-arm-20240624-en
android-9-x86
1 signatures
150 seconds
General
- Target cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098.zip
- Size 26KB
- Sample240707-vxv6gswark
- SHA256 ef37672b2f7594b56baf63c90c155ee32f4e2fd74116824ea6a5e1579dda4af8
- MD5 9c79a587d849d97788da8dc1986a335e
- SHA1 a4b459742747c1ba43171f723945220b6d1789df
- SHA512 42ee888309a76fef9c656ba270c13ef80e567f53334657ed162c878291ddd7a94462aea2039d68f39a046ba2da7fdb2f2d0ac58c93979e3d6051c0b5a2fa0c87
- SSDEEP 768:6Bqrg5CIqG5Xw6hisvqsmf+3Z5w1Vs0RX5s87m:aqrgQIL1whsDmf+3ZUVs0RXU
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
spymax
C2
-
[SPY_MAX_IP]:[SPY_MAX_PORT]
Signatures
- Spymax family
- Declares services with permission to bind to the system 1 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE - Requests dangerous framework permissions 16 IoCs
description ioc Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to read the user's call log. android.permission.READ_CALL_LOG Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS Required to be able to access the camera device. android.permission.CAMERA Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an application to record audio. android.permission.RECORD_AUDIO Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to write and read the user's call log data. android.permission.WRITE_CALL_LOG Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE
File Explorer
-
cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098.zip.zip 26KB
-
cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098.apk.apk 28KB
cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098.apk
- SHA256 cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098
- MD5 ac7e3b5bcd591fe15bf2c5aa43f389a8
- SHA1 9bfb12f6b99c9d7e80123c224a3c0d89fede5c58
- SHA512 a17dfaaf85f7347772981b91bbaa7c117d38d18213b2dec8e37f62a7fc5516002e0705e54b243df46ec96e4d998ef6fb58d5a1bbdb9a9a9a546012c53fe36efe
- SSDEEP 768:T7qKKd3PyfFrT2GJxeEUaDWD2RKFCl3fp66/YzL:T4P8eGJxOaDJ66/YzL
- MD5 SHA1 SHA512 SSDEEP
Password
infected
spymax.stub7.suffix
spymax.stub7.ClassGen9
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.FOREGROUND_SERVICE
android.permission.READ_SMS
android.permission.READ_CALL_LOG
android.permission.READ_CONTACTS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CAMERA
android.permission.INTERNET
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECORD_AUDIO
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
com.android.alarm.permission.SET_ALARM
android.permission.WRITE_CALL_LOG
android.permission.WRITE_CONTACTS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
com.oppo.launcher.permission.READ_SETTINGS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.CALL_PHONE
android.permission.SET_WALLPAPER
spymax.stub7.ClassGen9
android.intent.action.MAIN
spymax.stub7.ClassGen11
spymax.stub7.ClassGen6
spymax.stub7.ClassGen5
spymax.stub7.ClassGen12
android.accessibilityservice.AccessibilityService
spymax.stub7.ClassGen13
spymax.stub7.ClassGen1
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
spymax.stub7.ClassGen14
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF
android.Intent.ACTION_USER_PRESENT