General
-
Target
8469ec91f9058c03527dd55b2778864c5c11588ef2e1b7ba5938a4c3dacf7258.apk
-
Size
3.7MB
-
Sample
241212-cz5htsxmet
-
MD5
d15d3744e57d220dd297896f4b93eaa4
-
SHA1
83ea1f9a07a0f923729d46d6e830831f6f41b3e2
-
SHA256
8469ec91f9058c03527dd55b2778864c5c11588ef2e1b7ba5938a4c3dacf7258
-
SHA512
18bcf0fe4dbd088b440d03f454b0a8bb10b10d23b3e3fb0581c6ceb028d8d369d4fec7aea9363dcf3f0160f36bc02b9f16f6a433f9728e35ff6a5cc08d5f39d7
-
SSDEEP
98304:CieaIXa6MQc+3cP6JEtUV2zmy6mz/zBbTP0twsRP8:CcIBc+06Jhe1z5AY
Behavioral task
behavioral1
Sample
8469ec91f9058c03527dd55b2778864c5c11588ef2e1b7ba5938a4c3dacf7258.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
8469ec91f9058c03527dd55b2778864c5c11588ef2e1b7ba5938a4c3dacf7258.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
8469ec91f9058c03527dd55b2778864c5c11588ef2e1b7ba5938a4c3dacf7258.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Extracted
spynote
185.148.241.158:7771
Targets
-
-
Target
8469ec91f9058c03527dd55b2778864c5c11588ef2e1b7ba5938a4c3dacf7258.apk
-
Size
3.7MB
-
MD5
d15d3744e57d220dd297896f4b93eaa4
-
SHA1
83ea1f9a07a0f923729d46d6e830831f6f41b3e2
-
SHA256
8469ec91f9058c03527dd55b2778864c5c11588ef2e1b7ba5938a4c3dacf7258
-
SHA512
18bcf0fe4dbd088b440d03f454b0a8bb10b10d23b3e3fb0581c6ceb028d8d369d4fec7aea9363dcf3f0160f36bc02b9f16f6a433f9728e35ff6a5cc08d5f39d7
-
SSDEEP
98304:CieaIXa6MQc+3cP6JEtUV2zmy6mz/zBbTP0twsRP8:CcIBc+06Jhe1z5AY
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Queries information about active data network
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Foreground Persistence
1Hide Artifacts
1User Evasion
1Impair Defenses
1Prevent Application Removal
1Input Injection
1