Overview

overview

10

Static

static

10

db041da97c...87.apk

android-10-x64

7

db041da97c...87.apk

android-9-x86

6

Resubmissions

10/05/2026, 17:53

260510-wgjyysct4w10

09/07/2025, 16:24

250709-twb6jsan9t10

Sharing

Copy URL Twitter E-mail

General

  • Target
    250708-thrdbabp5z_pw_infected.zip
  • Size 35KB
  • Sample250709-twb6jsan9t
  • SHA256 dccce727ac2e30263c9333e70e48cf077064fa1cd32e7d85c54485a03d66bb0f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
spymaxandroidcollectioncredential_accessdefense_evasiondiscoveryimpactpersistence

Malware Config

Extracted

Family

  • spymax

C2

  • west2.shop:4444

Targets

    • Target
      db041da97c1f30a6fc7765994b556839f8550774af1662ae0ab105e2fc324487
    • Size 44KB
    • SHA256 db041da97c1f30a6fc7765994b556839f8550774af1662ae0ab105e2fc324487
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    collectioncredential_accessdefense_evasiondiscoveryimpactpersistence

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

      collectioncredential_accessimpact

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      defense_evasionpersistence

    • Queries the mobile country code (MCC)

      discovery
    behavioral1behavioral2

MITRE ATT&CK Mobile v16

Tasks