General
- Target ready.apk
- Size 684KB
- Sample251218-mbbkyse12f
- SHA256 888d3156f5cc5ae3de8861eb097197b4939b4f5b2e7f1ff88c558fd64dcdeecb
- MD5 9d84459d7647443097232be0cc00d7e9
- SHA1 5b48f1247abfc2e7b729bcc2dc9a94a1b23a447d
- SHA512 0777aaac5203c3b201dcc27888df6c0efb12868806f0013056e5421704125e1757455db95b2de5a1e97d7a8ed363bce0ac5e32688ffa5fb7daa31d32d9b222df
- SSDEEP 12288:c+CAB78RtsPxsr4n+2ouiz6m9WSMbKx/rYh/usT3cgtN0Fome6Rq21egNltWDvk2:fB78AP+jh9WZeNrYHT3SFomeGNbAvf
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x86-arm-20250917-en
6 signatures
900 seconds
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-20250917-en
5 signatures
900 seconds
Behavioral task
behavioral3
Sample
ready.apk
Resource
android-x64-arm64-20250917-en
4 signatures
900 seconds
Malware Config
Extracted
Family
-
spynote
C2
-
144.31.30.235:9898
Targets
-
- Target ready.apk
- Size 684KB
- SHA256 888d3156f5cc5ae3de8861eb097197b4939b4f5b2e7f1ff88c558fd64dcdeecb
- MD5 9d84459d7647443097232be0cc00d7e9
- SHA1 5b48f1247abfc2e7b729bcc2dc9a94a1b23a447d
- SHA512 0777aaac5203c3b201dcc27888df6c0efb12868806f0013056e5421704125e1757455db95b2de5a1e97d7a8ed363bce0ac5e32688ffa5fb7daa31d32d9b222df
- SSDEEP 12288:c+CAB78RtsPxsr4n+2ouiz6m9WSMbKx/rYh/usT3cgtN0Fome6Rq21egNltWDvk2:fB78AP+jh9WZeNrYHT3SFomeGNbAvf
- MD5 SHA1 SHA512 SSDEEP
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC)
-
Requests enabling of the accessibility settings.
MITRE ATT&CK Mobile v16
Defense Evasion
Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1