Analysis
-
max time kernel
30s -
max time network
204s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
17-01-2025 15:23
General
-
Target
https://github.com/gov-uk/GOV.UK
Score
10/10
Malware Config
Signatures
-
Spynote
Spynote is a Remote Access Trojan first seen in 2017.
-
Spynote family
-
Spynote payload 1 IoCs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.android.chrome1⤵
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
254KB
MD5b8b32421745406972c418b6f393449eb
SHA1bcbc77817f0a7eb3a3f4e06858a35f4bc6e965f2
SHA25639b4980228fc3a25140c33d14818642b60e1fb341148bd6ad9a15481b32b1225
SHA512c81fa42f8383bb196ecc96d60860729931c91bfadf7721115d5e20049c735ad1281de6c09c58b688e3116887686bbec137c61b005ea91e25eac1c0a8490530ca
-
Filesize
14.4MB
MD5e110925bc8236679b532b7e303a2ef4e
SHA1baa76e8fe7d9824589ee8460088ff5678c3cc589
SHA25673672e858e969f1994a173fb57dc50726161575c11ca9ea464dddab7315da8e5
SHA512fca019d634dae824b68a1b8cc739d79862019df3f59efe0e00c4648d604eeb25b1b6cd349c70406a5de773d9271333291cb5f79a6e3b1013d7a0cc2905fc1d6b