Overview

overview

10

Static

static

10

ready.apk

android-10-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ready.apk

  • Size

    9.3MB

  • Sample

    250123-srbtjstncy

  • MD5

    0f3aab006d2f4816b8434bfc162b2a6a

  • SHA1

    fa51bbee224ed20a9afb74f5d72db7b84429df29

  • SHA256

    3a76dde841daa9913fc81409bc342f2deb6f2df3d8427ab6f464e9b748a89224

  • SHA512

    254d2cd5beda6e0c0e5a54efaef3fc7ac71f439dada8328f7727123243a8c2b128c4dce76751728087b2bdc00dec32e06ecc4207d57be7edce61ec935a29976f

  • SSDEEP

    98304:9WaqExI4HVmdb7evYvtoToP7BmzrzBPTE0tcb3fK:ZxIxivYd7kzF3YK

Score
10/10
spynoteandroidcollectioncredential_accessdefense_evasionevasionexecutionpersistence

Malware Config

Targets

    • Target

      ready.apk

    • Size

      9.3MB

    • MD5

      0f3aab006d2f4816b8434bfc162b2a6a

    • SHA1

      fa51bbee224ed20a9afb74f5d72db7b84429df29

    • SHA256

      3a76dde841daa9913fc81409bc342f2deb6f2df3d8427ab6f464e9b748a89224

    • SHA512

      254d2cd5beda6e0c0e5a54efaef3fc7ac71f439dada8328f7727123243a8c2b128c4dce76751728087b2bdc00dec32e06ecc4207d57be7edce61ec935a29976f

    • SSDEEP

      98304:9WaqExI4HVmdb7evYvtoToP7BmzrzBPTE0tcb3fK:ZxIxivYd7kzF3YK

    Score
    7/10
    collectioncredential_accessdefense_evasionevasionexecutionpersistence

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectiondefense_evasioncredential_access

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      defense_evasionpersistence
    behavioral1

MITRE ATT&CK Mobile v15

Tasks