General
-
Target
client.apk
-
Size
760KB
-
Sample
250219-w74faawqbm
-
MD5
c9a25e311c30dec7d9f46fce34f0790b
-
SHA1
32531fbb5a1d1f0f1cb9977148dce10301b74af4
-
SHA256
282fc9917abb9518477f6e782f595f74c821612f619310743d91e69e946ec000
-
SHA512
47580c0b20509b7e169b060b8d09afd256d6fa7a803b1013018f8f028f1db4acbed63ef71222eb7370fc44318dd5c47fd94dccc94c570f2db81497efd0a9ed3f
-
SSDEEP
12288:wOxbAa1a8LVesP1yAMU5p5WmpYshXZPbGwidNpgvhx:wZa1aKesP1MU5p5WmD9idNpA7
Behavioral task
behavioral1
Sample
client.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
client.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
client.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Extracted
spynote
83.38.24.1:1603
Targets
-
-
Target
client.apk
-
Size
760KB
-
MD5
c9a25e311c30dec7d9f46fce34f0790b
-
SHA1
32531fbb5a1d1f0f1cb9977148dce10301b74af4
-
SHA256
282fc9917abb9518477f6e782f595f74c821612f619310743d91e69e946ec000
-
SHA512
47580c0b20509b7e169b060b8d09afd256d6fa7a803b1013018f8f028f1db4acbed63ef71222eb7370fc44318dd5c47fd94dccc94c570f2db81497efd0a9ed3f
-
SSDEEP
12288:wOxbAa1a8LVesP1yAMU5p5WmpYshXZPbGwidNpgvhx:wZa1aKesP1MU5p5WmD9idNpA7
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests enabling of the accessibility settings.
-
Tries to add a device administrator.
-
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Privilege Escalation
Abuse Elevation Control Mechanism
1Device Administrator Permissions
1