General

  • Target

    ready.apk

  • Size

    692KB

  • Sample

    250113-b5mdrsslek

  • MD5

    c5cd84f27901eef647e73936d84f286a

  • SHA1

    aee96e4fabfb94753e3537a93fe3040af19ff94a

  • SHA256

    8c3821ecad27b98016d1ddf8e511a909fdb61add882dd46b08806e24e7f6efce

  • SHA512

    743ce68c03206ab5cde8cfd0e105791d524a41c4338c24fda8016c1e7f31c09a1724819ce89275fdf39a8ad5248b86db8bbb10bf2b2472031e37d89b1c48fa65

  • SSDEEP

    12288:1buzE8bTe7rp+MLJ1Ksxy3N6W2/ERaSIQYKJRivXtnjGusT3cgtN0F6s6Rq21kgK:1uxbT0LJBIm/0YKJYtnjGHT3SF6sGN5K

Malware Config

Extracted

Family

spynote

C2

147.185.221.24:50768

Targets

    • Target

      ready.apk

    • Size

      692KB

    • MD5

      c5cd84f27901eef647e73936d84f286a

    • SHA1

      aee96e4fabfb94753e3537a93fe3040af19ff94a

    • SHA256

      8c3821ecad27b98016d1ddf8e511a909fdb61add882dd46b08806e24e7f6efce

    • SHA512

      743ce68c03206ab5cde8cfd0e105791d524a41c4338c24fda8016c1e7f31c09a1724819ce89275fdf39a8ad5248b86db8bbb10bf2b2472031e37d89b1c48fa65

    • SSDEEP

      12288:1buzE8bTe7rp+MLJ1Ksxy3N6W2/ERaSIQYKJRivXtnjGusT3cgtN0F6s6Rq21kgK:1uxbT0LJBIm/0YKJYtnjGHT3SF6sGN5K

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v15

Tasks