Overview

overview

10

Static

static

10

Tarif_base.apk

android-10-x64

7

Tarif_base.apk

android-11-x64

7

Tarif_base.apk

android-13-x64

7

Tarif_base.apk

android-9-x86

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Tarif_base.apk

  • Size

    4.6MB

  • Sample

    250127-pkby7axrhv

  • MD5

    5db867f30b739f86186d449f747f590a

  • SHA1

    3871729d78429ad2127d483d65a836a6c6e53128

  • SHA256

    bcb12986fe8ba7e2e6d433f18416d236ce5bdc76456201ab3a529fa6cb7f92fe

  • SHA512

    ac144a15c992e8f158d2bc38c661d172fd60ede8129e8604f2b42cce0f0a90451356cfa843466f5817049260557fb45da5f3bc77beb1114b14fbb51c2e487f87

  • SSDEEP

    98304:GMQGOK0DIkAPAvLoSPrH2Q+J6pxQmzAzBxTa0t0MQ+yO79y:GMQpKEIkPPL2Q+qpzu57Wp

Score
10/10
spynoteandroidcollectioncredential_accessdefense_evasionexecutionpersistence

Malware Config

Targets

    • Target

      Tarif_base.apk

    • Size

      4.6MB

    • MD5

      5db867f30b739f86186d449f747f590a

    • SHA1

      3871729d78429ad2127d483d65a836a6c6e53128

    • SHA256

      bcb12986fe8ba7e2e6d433f18416d236ce5bdc76456201ab3a529fa6cb7f92fe

    • SHA512

      ac144a15c992e8f158d2bc38c661d172fd60ede8129e8604f2b42cce0f0a90451356cfa843466f5817049260557fb45da5f3bc77beb1114b14fbb51c2e487f87

    • SSDEEP

      98304:GMQGOK0DIkAPAvLoSPrH2Q+J6pxQmzAzBxTa0t0MQ+yO79y:GMQpKEIkPPL2Q+qpzu57Wp

    Score
    7/10
    collectioncredential_accessdefense_evasionexecutionpersistence

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectiondefense_evasioncredential_access

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      defense_evasionpersistence

    • Requests enabling of the accessibility settings.

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Mobile v15

Tasks