General

  • Target

    ready.apk

  • Size

    692KB

  • Sample

    250219-me3tlsypex

  • MD5

    5016bd2701cdbe14a39b3a27395c97c4

  • SHA1

    2d996cae86c9a36d7ff4ad75af73bdfc05b10a58

  • SHA256

    af8d8233db16b4f3a6adbd7aef5300bde76dda74ccb610f5a1fc3f1dddc82ccb

  • SHA512

    012ce5e15c8bd9f24c29fff033d8823e2ef511bed238285bbba841d3be16701145c01fddd8ae71217943e2b7a4af35b6e19928e72e077ea093e59a1c78b53311

  • SSDEEP

    12288:cJFRKK4blrTQ9oQhKOUJQSPsKlXEHusT3cgtN0FDb6Rq21pgyBtWDzs:cRQFQYHJQDKREHHT3SFDbGNKhzs

Malware Config

Extracted

Family

spynote

C2

morning-ultimately.gl.at.ply.gg:morning-ultimately.gl.at.ply.gg:14531:14531

Targets

    • Target

      ready.apk

    • Size

      692KB

    • MD5

      5016bd2701cdbe14a39b3a27395c97c4

    • SHA1

      2d996cae86c9a36d7ff4ad75af73bdfc05b10a58

    • SHA256

      af8d8233db16b4f3a6adbd7aef5300bde76dda74ccb610f5a1fc3f1dddc82ccb

    • SHA512

      012ce5e15c8bd9f24c29fff033d8823e2ef511bed238285bbba841d3be16701145c01fddd8ae71217943e2b7a4af35b6e19928e72e077ea093e59a1c78b53311

    • SSDEEP

      12288:cJFRKK4blrTQ9oQhKOUJQSPsKlXEHusT3cgtN0FDb6Rq21pgyBtWDzs:cRQFQYHJQDKREHHT3SFDbGNKhzs

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v15

Tasks