General
- Target ready.apk
- Size 708KB
- Sample251011-v7ypcssqx7
- SHA256 b59b4f93ad819bb9b237fafd85e4bf21cde2dc63aa5935df4563022a08bf1677
- MD5 5034a3312691a0b19745c60d43505c87
- SHA1 db5f120ad3e116289066b733247b0425aaa21f6f
- SHA512 2fa2237c22ff1f7a91a1db3cc7482254a1e14b78a65532a8f65242a50c7e6e0c3f17c1d51eff371289d2ae23fe78de736e9cd06b28bcb935b55ab0db2364724d
- SSDEEP 12288:VRkZmQiWT/P+e4rl3nbmSO/NC0TVDATSPDI5eXusT3cgtN0FxmZ6Rq219gbYtWDr:DkZJi8n+blXOlSSdHT3SFxmZGNeP37
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x64-20250917-en
Malware Config
Extracted
-
spynote
-
take-baker.gl.at.ply.gg:35676
Targets
-
- Target ready.apk
- Size 708KB
- SHA256 b59b4f93ad819bb9b237fafd85e4bf21cde2dc63aa5935df4563022a08bf1677
- MD5 5034a3312691a0b19745c60d43505c87
- SHA1 db5f120ad3e116289066b733247b0425aaa21f6f
- SHA512 2fa2237c22ff1f7a91a1db3cc7482254a1e14b78a65532a8f65242a50c7e6e0c3f17c1d51eff371289d2ae23fe78de736e9cd06b28bcb935b55ab0db2364724d
- SSDEEP 12288:VRkZmQiWT/P+e4rl3nbmSO/NC0TVDATSPDI5eXusT3cgtN0FxmZ6Rq219gbYtWDr:DkZJi8n+blXOlSSdHT3SFxmZGNeP37
- MD5 SHA1 SHA512 SSDEEP
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Queries the mobile country code (MCC)
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Foreground Persistence
1Hide Artifacts
1Suppress Application Icon
1Impair Defenses
1Prevent Application Removal
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1