General

  • Target

    ready.apk

  • Size

    692KB

  • Sample

    250219-mfq67s1jt3

  • MD5

    48bd29da5720cbe378f451e1b740dec2

  • SHA1

    54c9ca15b3caf0e0dc267fae77a71c9a5ad0ecd1

  • SHA256

    722d667a3c7d543633134af590029799eb48699abaeda4947dec79af4018cad7

  • SHA512

    f6a6965fca1d8273f0bb70d014e588ce86ecd7cd2d1a6a0d79c51cf78d1205bd7bd955c8322f29f14ab4fd5925e317cfbb6ca8cf92160fdae126dd73a8f169c9

  • SSDEEP

    12288:ExEyg5BP2Kk6M0t8PHeVeX7/cZtAETo6eTUusT3cgtN0FS16Rq21IggvtWDdZv:tyg5Bpkm8moX3Gn+UHT3SFS1GNdddZv

Malware Config

Extracted

Family

spynote

C2

morning-ultimately.gl.at.ply.gg:morning-ultimately.gl.at.ply.gg:14531:14531

Targets

    • Target

      ready.apk

    • Size

      692KB

    • MD5

      48bd29da5720cbe378f451e1b740dec2

    • SHA1

      54c9ca15b3caf0e0dc267fae77a71c9a5ad0ecd1

    • SHA256

      722d667a3c7d543633134af590029799eb48699abaeda4947dec79af4018cad7

    • SHA512

      f6a6965fca1d8273f0bb70d014e588ce86ecd7cd2d1a6a0d79c51cf78d1205bd7bd955c8322f29f14ab4fd5925e317cfbb6ca8cf92160fdae126dd73a8f169c9

    • SSDEEP

      12288:ExEyg5BP2Kk6M0t8PHeVeX7/cZtAETo6eTUusT3cgtN0FS16Rq21IggvtWDdZv:tyg5Bpkm8moX3Gn+UHT3SFS1GNdddZv

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v15

Tasks