Extracted

• • Target
    Remote_Reviews_V9.23Ultra.apk
  • Size 3.9MB
  • SHA256 90329d2cca17f935f6f29dbdf807d95e8a542ed27c4a0faa5f8d052f88554167
  • MD5 9005cd0ea7bd0feda2976b715a506796
  • SHA1 2afd66df4752f363d91c5db01433bc17d54fcbe2
  • SHA512 fba5630893424a7cab52e77578044c494b428a7658682e87ccf072260e1138fe66b12da6975436134e7b62b0889f9553c6e03172c4cdb49f70685791adc7b136
  • SSDEEP 98304:SJG/JGRQqzFdew6Pqn0vtropcmz3zBQdTH0tA8m:64GRQqzFdhV0vt0pLzmdYa
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryexecutionspynoteimpactinfostealerpersistencerattrojan

  • Spynote

    Spynote is a Remote Access Trojan first seen in 2017.

    bankertrojaninfostealerratspynote

  • Spynote family

    spynote

  • Spynote payload

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Acquires the wake lock

  • Queries information about active data network

    discovery
  behavioral1