General

  • Target

    Roblox crack cheat 1.2.apk

  • Size

    753KB

  • Sample

    250103-jsqvesxrer

  • MD5

    4a4603e3014d5101eb30623b131b2ec2

  • SHA1

    471d97da289f1c9ea20a11352dee327fc586e661

  • SHA256

    d96de2b0a59f1bd8a15a309fadd9b7c66d819900386c83870cde581bbeceb029

  • SHA512

    e19fbe094f7fe96229141ca934ab230fdfeca38a551a2c5badd7e701bf70398206955c44752a32b1d628158a04e4325a78b57a780f2b30b2ec81f58dccab1eae

  • SSDEEP

    12288:bW8Ca1a8LreGMHAAfb5WmpYshXZPbGwidNpgN1I:bia1a2eGiAAfb5WmD9idNpb

Malware Config

Extracted

Family

spynote

C2

book-mar.gl.at.ply.gg:55634

Targets

    • Target

      Roblox crack cheat 1.2.apk

    • Size

      753KB

    • MD5

      4a4603e3014d5101eb30623b131b2ec2

    • SHA1

      471d97da289f1c9ea20a11352dee327fc586e661

    • SHA256

      d96de2b0a59f1bd8a15a309fadd9b7c66d819900386c83870cde581bbeceb029

    • SHA512

      e19fbe094f7fe96229141ca934ab230fdfeca38a551a2c5badd7e701bf70398206955c44752a32b1d628158a04e4325a78b57a780f2b30b2ec81f58dccab1eae

    • SSDEEP

      12288:bW8Ca1a8LreGMHAAfb5WmpYshXZPbGwidNpgN1I:bia1a2eGiAAfb5WmD9idNpb

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Requests enabling of the accessibility settings.

    • Tries to add a device administrator.

MITRE ATT&CK Mobile v15

Tasks