General

  • Target

    RetiredTraveller.apk

  • Size

    4.4MB

  • MD5

    c3caa51ac5464ca58f891b6bad4a7990

  • SHA1

    b1b998e5c9d7091eed91292fa834964062dad07e

  • SHA256

    e61f76f23f31a80a601bf637a55df70ac886937c5103fdd1f32cadcab4c42c72

  • SHA512

    6ca29b647d70f95949a0665fdacb8b5165cd6f20cf2e0cdc820bdbe14619a1c1275028278c259f1f98363ace09e7fd5e5ca8065af0ad56b238cc60c90d77767b

  • SSDEEP

    98304:BFkHtzBnTfmzNE0tVW0lz4+7zjEs9XqL/6J1A6GT31HhzJKO2jZU:v2OzZVW0lb7fZqL/6PGT3v4VW

Score
10/10

Malware Config

Signatures

  • Spynote family
  • Spynote payload 1 IoCs
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 15 IoCs

Files

  • RetiredTraveller.apk
    .apk android

    readers.organizational.really

    readers.organizational.pccbszdbxmqovaizjjbdctamnuhhysgemcjxkcabkbupesxlbw2.MainActivity


Android Permissions

RetiredTraveller.apk

Permissions

android.permission.SEND_SMS

android.permission.SET_WALLPAPER

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

oppo.permission.OPPO_COMPONENT_SAFE

oplus.permission.OPLUS_COMPONENT_SAFE

com.huawei.permission.external_app_settings.USE_COMPONENT

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.