General
- Target d8438b05118a01791311dcadd84d429191a9975f9afa8310a4a92ade5a2bc4d2.apk
- Size 5.4MB
- Sample241111-dld96a1eql
- SHA256 d8438b05118a01791311dcadd84d429191a9975f9afa8310a4a92ade5a2bc4d2
- MD5 d87c5428d2ea1698309431f715227084
- SHA1 4ba458a6671ab8830f0e1cb782de386cbc5e388a
- SHA512 c24dedb312049be82be6189ee638b2b354b16796944b82b7fc263d923b1afc7352658188e3e17f52f75b3caed85764c73c1f721eb7eeaeac6c4813da0aa6a7e7
- SSDEEP 98304:aZBgLCrAZMbyDt4QjH2OFo2Ew+Y9883t9qdAY2EUXHbhbuZOf8eepoVP8BHq:Okkc4Qr2OFoZ+32A3ztuZOkeVPgHq
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
d8438b05118a01791311dcadd84d429191a9975f9afa8310a4a92ade5a2bc4d2.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
d8438b05118a01791311dcadd84d429191a9975f9afa8310a4a92ade5a2bc4d2.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
d8438b05118a01791311dcadd84d429191a9975f9afa8310a4a92ade5a2bc4d2.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
lariska.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral5
Sample
lariska.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral6
Sample
lariska.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Extracted
-
spynote
-
91.214.78.18:7771
Targets
-
- Target d8438b05118a01791311dcadd84d429191a9975f9afa8310a4a92ade5a2bc4d2.apk
- Size 5.4MB
- SHA256 d8438b05118a01791311dcadd84d429191a9975f9afa8310a4a92ade5a2bc4d2
- MD5 d87c5428d2ea1698309431f715227084
- SHA1 4ba458a6671ab8830f0e1cb782de386cbc5e388a
- SHA512 c24dedb312049be82be6189ee638b2b354b16796944b82b7fc263d923b1afc7352658188e3e17f52f75b3caed85764c73c1f721eb7eeaeac6c4813da0aa6a7e7
- SSDEEP 98304:aZBgLCrAZMbyDt4QjH2OFo2Ew+Y9883t9qdAY2EUXHbhbuZOf8eepoVP8BHq:Okkc4Qr2OFoZ+32A3ztuZOkeVPgHq
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target lariska.apk
- Size 3.6MB
- SHA256 f3df45ca4a6184785d56aeca18a3d05422171f962605c503da303209aad7cb8d
- MD5 05662dcd85b5a5bdb5e2f322938c723c
- SHA1 3c6e0cfde33019c7fff44ac1fd696b817087004a
- SHA512 342a67aa86670efeb8f8f3c882b7bcb1552b13df0bc41bdcf1cf817e888129f898639a3293c0bc11030ea55fb67132b1725363d298cbb77326e4e33e2b0452c4
- SSDEEP 49152:bqYquuzdGGpQTOs0cgrmzE80UtDUTWh8+VzL6aueqN9eU6OeSnBSv/he1/W9X2f:TuzBmTZ0trmzYiiWLdq8SnovZX2f
- MD5 SHA1 SHA512 SSDEEP
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
Acquires the wake lock
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
Requests disabling of battery optimizations (often used to enable hiding in the background).
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Hide Artifacts
2Suppress Application Icon
1User Evasion
1Input Injection
1