spyagent | 149bd232175659434bbeed9f12c8dd369d888b22afaf2faabc684c8ff2096f8c | Triage

Sharing

General

Target

149bd232175659434bbeed9f12c8dd369d888b22afaf2faabc684c8ff2096f8c
Size

8.5MB
Sample

241101-rh2syasrbk
MD5

a097e2b3ec5496dd18b34c9344b5b231
SHA1

d92439fcdba8d468b2b6d64d0542c48c41b99abc
SHA256

149bd232175659434bbeed9f12c8dd369d888b22afaf2faabc684c8ff2096f8c
SHA512

45b400ea85aa225dfaeee7c0ad108b3d27b15ab633a003fe8d767df7162544e4a661083041e76587f79f841a36e63e59b55ef8bf3f15848d65d30d21862a83f2
SSDEEP

196608:JH6fslAGOGD+ZAeZx2S7cRrFXKe+rof8n7DLH:lwslAPTAeZxeFXWr+o

Score

10^/10

spyagent android collection credential_access discovery evasion impact persistence stealth trojan

Malware Config

Targets

- Target
  
  149bd232175659434bbeed9f12c8dd369d888b22afaf2faabc684c8ff2096f8c
- Size
  
  8.5MB
- MD5
  
  a097e2b3ec5496dd18b34c9344b5b231
- SHA1
  
  d92439fcdba8d468b2b6d64d0542c48c41b99abc
- SHA256
  
  149bd232175659434bbeed9f12c8dd369d888b22afaf2faabc684c8ff2096f8c
- SHA512
  
  45b400ea85aa225dfaeee7c0ad108b3d27b15ab633a003fe8d767df7162544e4a661083041e76587f79f841a36e63e59b55ef8bf3f15848d65d30d21862a83f2
- SSDEEP
  
  196608:JH6fslAGOGD+ZAeZx2S7cRrFXKe+rof8n7DLH:lwslAPTAeZxeFXWr+o
Score

8^/10

discovery evasion persistence stealth trojan collection credential_access impact
- Removes its main activity from the application launcher
  stealth trojan evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries the mobile country code (MCC)
  discovery
- Requests disabling of battery optimizations (often used to enable hiding in the background).
  evasion
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Hide Artifacts

Suppress Application Icon

User Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

discoveryevasionpersistencestealthtrojan

behavioral2

collectioncredential_accessdiscoveryevasionimpactpersistencestealthtrojan

behavioral3

collectioncredential_accessevasionimpact