General

  • Target

    ready.apk

  • Size

    692KB

  • Sample

    250219-mn36qsyqgs

  • MD5

    30b0cbf2a67ee0f76b0fe6333fdd0024

  • SHA1

    a5291b7858652fc4eff4d0d78a345fc1948b94c7

  • SHA256

    2ca6730c055058ae82cf37d340e10ef30f17e9cba0f18d140ff291a20cf5fbc4

  • SHA512

    2a2a8b7741e12ae5514447d9d2c8bedd3191be4f69635e105b0ac814071bd4001477aefef6423f52f7b34ca77fcadb7c423e124b11fe8ff2cd08a566ac021c36

  • SSDEEP

    12288:POsQqQDH1aE3Wnb0Z1jX9WcTbs0jGaYPK3usT3cgtN0FfU6Rq21sgWLtWDdt:GsQqiaukb+jX9WUbpjGr6HT3SFfUGNx7

Malware Config

Extracted

Family

spynote

C2

morning-ultimately.gl.at.ply.gg:morning-ultimately.gl.at.ply.gg:morning-ultimately.gl.at.ply.gg:14531:14531:14531

Targets

    • Target

      ready.apk

    • Size

      692KB

    • MD5

      30b0cbf2a67ee0f76b0fe6333fdd0024

    • SHA1

      a5291b7858652fc4eff4d0d78a345fc1948b94c7

    • SHA256

      2ca6730c055058ae82cf37d340e10ef30f17e9cba0f18d140ff291a20cf5fbc4

    • SHA512

      2a2a8b7741e12ae5514447d9d2c8bedd3191be4f69635e105b0ac814071bd4001477aefef6423f52f7b34ca77fcadb7c423e124b11fe8ff2cd08a566ac021c36

    • SSDEEP

      12288:POsQqQDH1aE3Wnb0Z1jX9WcTbs0jGaYPK3usT3cgtN0FfU6Rq21sgWLtWDdt:GsQqiaukb+jX9WUbpjGr6HT3SFfUGNx7

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v15

Tasks