Overview

overview

10

Static

static

6

39cb17cb03...0d.apk

android-9-x86

10

39cb17cb03...0d.apk

android-10-x64

10

39cb17cb03...0d.apk

android-11-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    39cb17cb03a794e69eb4f0694e90e41a8cfb8480b82da82fcbd4a88dfe49930d.bin
  • Size 8.1MB
  • Sample251104-tavqrsvmel
  • SHA256 39cb17cb03a794e69eb4f0694e90e41a8cfb8480b82da82fcbd4a88dfe49930d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
plaingnomeandroidevasioninfostealerspywaretrojan

Malware Config

Extracted

Family

  • plaingnome

C2

  • https://ollymap.pw/

  • https://wleak.pw/

Targets

    • Target
      39cb17cb03a794e69eb4f0694e90e41a8cfb8480b82da82fcbd4a88dfe49930d.bin
    • Size 8.1MB
    • SHA256 39cb17cb03a794e69eb4f0694e90e41a8cfb8480b82da82fcbd4a88dfe49930d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    plaingnomeinfostealerspywaretrojanevasion

    • PlainGnome

      PlainGnome is an Android surveillance tool first seen in December 2024.

      trojaninfostealerspywareplaingnome

    • PlainGnome payload

    • Plaingnome family

      plaingnome

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Requests dangerous framework permissions

    behavioral1behavioral2behavioral3

MITRE ATT&CK Mobile v16

Tasks