General

  • Target

    a70089301ff628f09b90b269f6e8f5c6b5ae0b3073028abcc62fec9d2f1c954c.bin

  • Size

    760KB

  • MD5

    743c6ce4a7c9f9e91e3520842d557fa3

  • SHA1

    46023498bf0b90a703ea5cb1555d4cfc9839684b

  • SHA256

    a70089301ff628f09b90b269f6e8f5c6b5ae0b3073028abcc62fec9d2f1c954c

  • SHA512

    93ad788ed1b6ebd2d99c8a2fd6dbfa4cd72af5f5fad9c49c2b4a91a35651904305f0c7fe249b7e781ef7e5e9ba31034c3cf8b2ec29e8ef06a7847c05f43687dd

  • SSDEEP

    12288:eOAG+rCJ6sgRwLzlDNVpkyw5WmpYshXZPbGwidNpgB:eyJ6sbLzlbpkyw5WmD9idNpy

Score
10/10

Malware Config

Extracted

Family

spynote

C2

182.191.122.219:8855

Signatures

  • Spynote family
  • Spynote payload 1 IoCs
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 18 IoCs

Files

  • a70089301ff628f09b90b269f6e8f5c6b5ae0b3073028abcc62fec9d2f1c954c.bin
    .apk android

    cmf0.c3b5bm90zq.patch

    cmf0.c3b5bm90zq.patch.C7


Android Permissions

a70089301ff628f09b90b269f6e8f5c6b5ae0b3073028abcc62fec9d2f1c954c.bin

Permissions

android.permission.FLASHLIGHT

android.permission.CAMERA

android.permission.BLUETOOTH

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.VIBRATE

android.permission.CAMERA

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_CONTACTS

android.permission.READ_CONTACTS

android.permission.RECORD_AUDIO

android.permission.READ_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_CALL_LOG

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.GET_TASKS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.