General
- Target ready.apk
- Size 29KB
- Sample260112-m4v53adv4c
- SHA256 cc35ef7eb0ba55bf986fb27da4969a72b7e6406e31db92b138dca4782cf0cbbc
- MD5 51006815bfe958d31f544bbf5c5a00b5
- SHA1 2ec118ab5ed7a54f31a13d5e4d48014b4d0f5570
- SHA512 d850bfc909b921ae4eba8b64dfdb273d96e8c8f701a2d926653afc587355693943853c986345d7c3773110be3f55e594f0555304d537030fd36b966a74e2ae9d
- SSDEEP 768:Hw+tu5BKKEJPlDXhXCPNQiRdbkQIxIn0AUs0Pl6E:QtLKKEJ1XhXmRdbko8s0EE
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x86-arm-20260104-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
spymax
C2
-
artemkalenadov-42277.portmap.host:42277
Targets
-
- Target ready.apk
- Size 29KB
- SHA256 cc35ef7eb0ba55bf986fb27da4969a72b7e6406e31db92b138dca4782cf0cbbc
- MD5 51006815bfe958d31f544bbf5c5a00b5
- SHA1 2ec118ab5ed7a54f31a13d5e4d48014b4d0f5570
- SHA512 d850bfc909b921ae4eba8b64dfdb273d96e8c8f701a2d926653afc587355693943853c986345d7c3773110be3f55e594f0555304d537030fd36b966a74e2ae9d
- SSDEEP 768:Hw+tu5BKKEJPlDXhXCPNQiRdbkQIxIn0AUs0Pl6E:QtLKKEJ1XhXmRdbko8s0EE
- MD5 SHA1 SHA512 SSDEEP
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Hide Artifacts
1Suppress Application Icon
1