ac7e3b5bcd591fe15bf2c5aa43f389a8.bin
- SHA256 16cc7b44497ece4b80be1134d5a94ab65702fc32937915ad394193f9803af67a
Password
infected
Behavioral task
behavioral1
Sample
cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098.apk
Resource
android-x86-arm-20240624-en
android-9-x86
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098.apk
Resource
android-x64-20240624-en
android-10-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
0 signatures
150 seconds
General
- Target ac7e3b5bcd591fe15bf2c5aa43f389a8.bin
- Size 26KB
- Sample240709-cfl75sshpd
- SHA256 16cc7b44497ece4b80be1134d5a94ab65702fc32937915ad394193f9803af67a
- MD5 7b77219246a182a1ebb73d6c75b80111
- SHA1 3ef54d53c81708e4eb5a069a0c0367cbc67d8db2
- SHA512 f3c77f89577d86566f1744e74e47b76f7c647be51ef0c7caf6c29ded7d3c67424e6e5e92a45f1a0aff079ff03dae0662fe1e4c2e17131ae8ae03d3b7b5ca47e6
- SSDEEP 768:2SCSNX3x6Di7dvfBxl6OI4P0NBpxL2paD460SYqH4:2PqHBz620BpR2paD460S4
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
spymax
C2
-
[SPY_MAX_IP]:[SPY_MAX_PORT]
Signatures
- Spymax family
- Declares services with permission to bind to the system 1 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE - Requests dangerous framework permissions 16 IoCs
description ioc Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to read the user's call log. android.permission.READ_CALL_LOG Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS Required to be able to access the camera device. android.permission.CAMERA Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an application to record audio. android.permission.RECORD_AUDIO Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to write and read the user's call log data. android.permission.WRITE_CALL_LOG Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE
File Explorer
-
ac7e3b5bcd591fe15bf2c5aa43f389a8.bin.zip 26KB
-
cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098.apk.apk 28KB
cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098.apk
- SHA256 cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098
- MD5 ac7e3b5bcd591fe15bf2c5aa43f389a8
- SHA1 9bfb12f6b99c9d7e80123c224a3c0d89fede5c58
- SHA512 a17dfaaf85f7347772981b91bbaa7c117d38d18213b2dec8e37f62a7fc5516002e0705e54b243df46ec96e4d998ef6fb58d5a1bbdb9a9a9a546012c53fe36efe
- SSDEEP 768:T7qKKd3PyfFrT2GJxeEUaDWD2RKFCl3fp66/YzL:T4P8eGJxOaDJ66/YzL
- MD5 SHA1 SHA512 SSDEEP
Password
infected
spymax.stub7.suffix
spymax.stub7.ClassGen9
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.FOREGROUND_SERVICE
android.permission.READ_SMS
android.permission.READ_CALL_LOG
android.permission.READ_CONTACTS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CAMERA
android.permission.INTERNET
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECORD_AUDIO
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
com.android.alarm.permission.SET_ALARM
android.permission.WRITE_CALL_LOG
android.permission.WRITE_CONTACTS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
com.oppo.launcher.permission.READ_SETTINGS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.CALL_PHONE
android.permission.SET_WALLPAPER
spymax.stub7.ClassGen9
android.intent.action.MAIN
spymax.stub7.ClassGen11
spymax.stub7.ClassGen6
spymax.stub7.ClassGen5
spymax.stub7.ClassGen12
android.accessibilityservice.AccessibilityService
spymax.stub7.ClassGen13
spymax.stub7.ClassGen1
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
spymax.stub7.ClassGen14
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF
android.Intent.ACTION_USER_PRESENT