General

  • Target
    tool.apk
  • Size 696KB
  • Sample241020-a97d3azane
  • SHA256 2512b551758aa82edc38df3cabb050191ba71e27771a85cd9ee27ad7d0d8b531
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • spynote

C2
  • call-flip.gl.at.ply.gg:4411

Targets

    • Target
      tool.apk
    • Size 696KB
    • SHA256 2512b551758aa82edc38df3cabb050191ba71e27771a85cd9ee27ad7d0d8b531
    • MD5 SHA1 SHA512 SSDEEP
    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v15

Tasks