Resubmissions

06/08/2024, 16:07

240806-tk3jcsxdma10

06/08/2024, 16:02

240806-tgtr2sxcmg10

06/08/2024, 16:00

240806-tfwv1sxcja10

General

  • Target
    standoffcheat.apk
  • Size 853KB
  • Sample240806-tk3jcsxdma
  • SHA256 795c8acc11607d4d0fd05b2dc92eba06553c810997d3682427e17fe006043260
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • spynote

C2
  • means-fee.gl.at.ply.gg:55440

Targets

    • Target
      standoffcheat.apk
    • Size 853KB
    • SHA256 795c8acc11607d4d0fd05b2dc92eba06553c810997d3682427e17fe006043260
    • MD5 SHA1 SHA512 SSDEEP
    • Removes its main activity from the application launcher

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

MITRE ATT&CK Mobile v15

Tasks