General

  • Target
    db041da97c1f30a6fc7765994b556839f8550774af1662ae0ab105e2fc324487
  • Size 44KB
  • Sample250708-thrdbabp5z
  • SHA256 db041da97c1f30a6fc7765994b556839f8550774af1662ae0ab105e2fc324487
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • spymax

C2
  • west2.shop:4444

Targets

    • Target
      db041da97c1f30a6fc7765994b556839f8550774af1662ae0ab105e2fc324487
    • Size 44KB
    • SHA256 db041da97c1f30a6fc7765994b556839f8550774af1662ae0ab105e2fc324487
    • MD5 SHA1 SHA512 SSDEEP
    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v16

Tasks