General
-
Target
client.apk
-
Size
760KB
-
Sample
250327-w38jfawwcw
-
MD5
ce99fcb4e374391d16f135ac4cf5953a
-
SHA1
1c87c24349ae286b47ab9bac12b7f949d177f624
-
SHA256
4e4851de6ed3b965f05a848c9949e4a513a3f71e6f45e2830caabf8b8c38d585
-
SHA512
f778307ca383d04b613a58ac4c1d667731c7721631174f2a0cebce156a27866a80df94f3dd052bfde583410e2a27de2da3deb5fb22ea81f6297f385e647fde01
-
SSDEEP
12288:sWGFKidPa1a8Lzeyf8/UypN5WmpYshXZPbGwidNpgf2U:sWaPa1amey2UypN5WmD9idNpU
Behavioral task
behavioral1
Sample
client.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
client.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
client.apk
Resource
android-x64-arm64-20240910-en
Malware Config
Extracted
spynote
193.161.193.99:1194
Targets
-
-
Target
client.apk
-
Size
760KB
-
MD5
ce99fcb4e374391d16f135ac4cf5953a
-
SHA1
1c87c24349ae286b47ab9bac12b7f949d177f624
-
SHA256
4e4851de6ed3b965f05a848c9949e4a513a3f71e6f45e2830caabf8b8c38d585
-
SHA512
f778307ca383d04b613a58ac4c1d667731c7721631174f2a0cebce156a27866a80df94f3dd052bfde583410e2a27de2da3deb5fb22ea81f6297f385e647fde01
-
SSDEEP
12288:sWGFKidPa1a8Lzeyf8/UypN5WmpYshXZPbGwidNpgf2U:sWaPa1amey2UypN5WmD9idNpU
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests enabling of the accessibility settings.
-
Tries to add a device administrator.
-
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Privilege Escalation
Abuse Elevation Control Mechanism
1Device Administrator Permissions
1