Resubmissions

06/09/2024, 18:35

240906-w8gb5ssanp 10

06/09/2024, 18:32

240906-w6qsss1hqq 10

06/09/2024, 18:31

240906-w58bfssble 10

General

  • Target

    ready.apk

  • Size

    8.5MB

  • MD5

    67c4ce91c69b694608aeb0f0d9a3a454

  • SHA1

    771499c13d1af12c56673e068837a50369defc93

  • SHA256

    e0f11c77d2df7c15381326d173c1ed4c14125cf669fc279724689d6de113f284

  • SHA512

    49854e79b3c67f53080f86d9852aac8d93c27f7c773390d6b55f8c1724f2be3c15e995835bf46b6973a7f3c181f85bcfb46e781816aa1b1b73c050eb314cf033

  • SSDEEP

    98304:tjVI6tdWPKHHF5K2+hRSTImz2zBdTn0tgw:o6ywHT9CRA3z84h

Score
10/10

Malware Config

Extracted

Family

spynote

C2

apr-providing.gl.at.ply.gg:26510

Signatures

  • Spynote family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • ready.apk
    .apk android

    making.wise.tp

    making.wise.uaehdaeajqihxssqfkgcdqfcamigonlknigssiarhyzaedbdsr2.dwfglzeguebezndyaqmjynipzabtqieclgkvsnwrzzxgytmesc31


Android Permissions

ready.apk

Permissions

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

oppo.permission.OPPO_COMPONENT_SAFE

oplus.permission.OPLUS_COMPONENT_SAFE

com.huawei.permission.external_app_settings.USE_COMPONENT

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT