General

  • Target

    ready.apk

  • Size

    692KB

  • Sample

    250219-mkbx3s1jz9

  • MD5

    82b3d1e048d440c286131650dc6ca9d8

  • SHA1

    7697b560d5b3d6d99ebe49a4e6d4c4e1b47ff843

  • SHA256

    11bd8f00a6c26a3277ecad50f031c6d341da0e3997296a1ce2ed38827bf62891

  • SHA512

    b7f337ef686022a02ec5a1c41607d37dec873b6a69749dd5ff7c3b22162c0bfd533ecd07d49312d67e8b67bf588a38bb20c6b35eb710801c643f6116c90e1066

  • SSDEEP

    12288:O1VMC9BHFg+H6MT4ThOx1z6amPbWLpiusT3cgtN0F8I6Rq21XgDAtWDpO:O1Vr9NFgO6JUzzZmzWUHT3SF8IGNQnpO

Malware Config

Extracted

Family

spynote

C2

morning-ultimately.gl.at.ply.gg:morning-ultimately.gl.at.ply.gg:morning-ultimately.gl.at.ply.gg:14531:14531:14531

Targets

    • Target

      ready.apk

    • Size

      692KB

    • MD5

      82b3d1e048d440c286131650dc6ca9d8

    • SHA1

      7697b560d5b3d6d99ebe49a4e6d4c4e1b47ff843

    • SHA256

      11bd8f00a6c26a3277ecad50f031c6d341da0e3997296a1ce2ed38827bf62891

    • SHA512

      b7f337ef686022a02ec5a1c41607d37dec873b6a69749dd5ff7c3b22162c0bfd533ecd07d49312d67e8b67bf588a38bb20c6b35eb710801c643f6116c90e1066

    • SSDEEP

      12288:O1VMC9BHFg+H6MT4ThOx1z6amPbWLpiusT3cgtN0F8I6Rq21XgDAtWDpO:O1Vr9NFgO6JUzzZmzWUHT3SF8IGNQnpO

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v15

Tasks