General
-
Target
ready.apk
-
Size
692KB
-
Sample
250219-mfq67s1jt3
-
MD5
48bd29da5720cbe378f451e1b740dec2
-
SHA1
54c9ca15b3caf0e0dc267fae77a71c9a5ad0ecd1
-
SHA256
722d667a3c7d543633134af590029799eb48699abaeda4947dec79af4018cad7
-
SHA512
f6a6965fca1d8273f0bb70d014e588ce86ecd7cd2d1a6a0d79c51cf78d1205bd7bd955c8322f29f14ab4fd5925e317cfbb6ca8cf92160fdae126dd73a8f169c9
-
SSDEEP
12288:ExEyg5BP2Kk6M0t8PHeVeX7/cZtAETo6eTUusT3cgtN0FS16Rq21IggvtWDdZv:tyg5Bpkm8moX3Gn+UHT3SFS1GNdddZv
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
ready.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Extracted
spynote
morning-ultimately.gl.at.ply.gg:morning-ultimately.gl.at.ply.gg:14531:14531
Targets
-
-
Target
ready.apk
-
Size
692KB
-
MD5
48bd29da5720cbe378f451e1b740dec2
-
SHA1
54c9ca15b3caf0e0dc267fae77a71c9a5ad0ecd1
-
SHA256
722d667a3c7d543633134af590029799eb48699abaeda4947dec79af4018cad7
-
SHA512
f6a6965fca1d8273f0bb70d014e588ce86ecd7cd2d1a6a0d79c51cf78d1205bd7bd955c8322f29f14ab4fd5925e317cfbb6ca8cf92160fdae126dd73a8f169c9
-
SSDEEP
12288:ExEyg5BP2Kk6M0t8PHeVeX7/cZtAETo6eTUusT3cgtN0FS16Rq21IggvtWDdZv:tyg5Bpkm8moX3Gn+UHT3SFS1GNdddZv
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Queries the mobile country code (MCC)
-
Requests enabling of the accessibility settings.
-
MITRE ATT&CK Mobile v15
Defense Evasion
Impair Defenses
1Prevent Application Removal
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1