General

  • Target
    Spymax 4.0.zip
  • Size 104.4MB
  • Sample260116-jlcn8aav8b
  • SHA256 d540968e48c5d86e6cfe69774894a54401996982ac218b998c6be5722031a45b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • spymax

C2
  • [SPY_MAX_IP]:[SPY_MAX_PORT]

Targets

    • Target
      Spymax 4.0/PATCH-SDK26.apk
    • Size 28KB
    • SHA256 cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Spymax 4.0/PATCH-SDK28.apk
    • Size 28KB
    • SHA256 cde47bed5ec83e29f6455ec35228c3f56d488393668f5b720b79fcd6cb3bc098
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Spymax 4.0/SpyMax 4.0.exe
    • Size 2.4MB
    • SHA256 982608c4bc15e5d7f36660665d96b5625d5cfffd63c895ed67956562a6807b8a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    5/10
    • ConfuserEx .NET packer

      Detects ConfuserEx .NET packer.

    • Target
      Spymax 4.0/WinMM.Net.dll
    • Size 43KB
    • SHA256 59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Spymax 4.0/res/Lib/Build.exe
    • Size 51KB
    • SHA256 bdd100c9b0cfde21cba33dd74b9149898cddb2917ec8e2ef80d2c2d1bf255c73
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Spymax 4.0/res/Lib/LibGSM.dll
    • Size 6KB
    • SHA256 d287bd2e539bb200e79a23450597b66f0366e627bb5f249b74b266696f3f665d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      platformBinary32/bin/JAWTAccessBridge-32.dll
    • Size 15KB
    • SHA256 2e2019435694b89a7ef49ab75cf291278417bff384b814da1e451285cb8d64c1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/JAWTAccessBridge.dll
    • Size 15KB
    • SHA256 4227bc0f4ca568c8bb84cb01705ecad235826297a4b942cd56f2f2a3cfd882c1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/JavaAccessBridge-32.dll
    • Size 126KB
    • SHA256 10380aabe130ebb62ecf3d09620e8e15fd2335a1ea2faf74c41d057d9e06eee4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/JavaAccessBridge.dll
    • Size 125KB
    • SHA256 d8f4728c6a835509cd5a26bdcd248b4176127c5b62f914da9e8a060b354cca73
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/WindowsAccessBridge-32.dll
    • Size 97KB
    • SHA256 bc18778df9b32a4dedd8c9a98908be58989a256d1b241aa0a1dec08113a7750e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/WindowsAccessBridge.dll
    • Size 95KB
    • SHA256 eceadccbe120bbe6fd265fe6b19be43148ab0eda663dd866fd8db764a4cadd22
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/apktool.bat
    • Size 135B
    • SHA256 3d8108beb40535e68e7f6421a4309408ea5efab91707fa25d862154e3cc9b6df
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      platformBinary32/bin/apktool.jar
    • Size 10.5MB
    • SHA256 758b1bd58f9c9dd5ca85258d31c75f32e5878a502e3d75c66f3bfacf74b9dc1d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      platformBinary32/bin/attach.dll
    • Size 20KB
    • SHA256 7370a6e3533dfa636e39c0a5840a92ac7ef34931c5ff6f44099c711478a8ee93
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/awt.dll
    • Size 1.1MB
    • SHA256 0a6fa37644d15b6d6e89faa05522cd7c61a455b3f5fea2bc8d82d4fd881663f0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/clhsdb.exe
    • Size 16KB
    • SHA256 b7eaba3a063ba32ee23701319656b86cec28ccc6c0fe4b42fb13e51bb3414162
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/client/jvm.dll
    • Size 3.7MB
    • SHA256 f47842d41f9e0605d24a509e4e76b8dda71894571536ccb4a50464b5f83c8420
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/dt_shmem.dll
    • Size 25KB
    • SHA256 37e78789078575793b9bb8a979c40b055c06a3d620e970558045a097689db6b2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/dt_socket.dll
    • Size 22KB
    • SHA256 a2f595dc28b3c1b221cca4f1fec479240cd48d5c04979a81d8fc318817650fd1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/fontmanager.dll
    • Size 228KB
    • SHA256 b02b7a45c445e107a4c64b91a0c4697dc521d47ca4f745101f36e8678be8464c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/freetype.dll
    • Size 501KB
    • SHA256 ac9651655b48c5d5f8236857c2124707c9405149c83963e223d89891a93427d1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/hprof.dll
    • Size 130KB
    • SHA256 0d56e6e5a98f73f21ddf87aacd4cb5a28479f4c24b2539f35d4a98f97495b0cb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      platformBinary32/bin/hsdb.exe
    • Size 16KB
    • SHA256 76982dbe2d5823e55dd29db18a8fa8dc31cbabb44ab038f7476902b7565742b4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Spymax 4.0/res/Plugins/Android/gen-1.pl
    • Size 5KB
    • SHA256 74be0a34fa03858f3a80f7a7e0df7359d1a27185de342e5541975e53658eeb55
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Spymax 4.0/res/Plugins/Android/gen-2.pl
    • Size 4KB
    • SHA256 f0326ad672ec2278750232cc920769710972da0594f45641441a4327a555cb8e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Spymax 4.0/res/Plugins/Android/gen-3.pl
    • Size 5KB
    • SHA256 42c8d417fcc509864d08d42ef61a4926a17010abce6c1f06187acd931a9eeaab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Spymax 4.0/res/Plugins/Android/gen-4.pl
    • Size 14KB
    • SHA256 83fb2d28521c56153835161c2d8a0bdf52f19a98a0d93a8570eac7c265e1cd09
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Spymax 4.0/res/Plugins/Android/gen-5.pl
    • Size 10KB
    • SHA256 627ed3f263422bc9a2887a5b8e81f0478a9e607864b71fcdd3bb6914b6ac9224
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Spymax 4.0/res/Plugins/Android/gen-6.pl
    • Size 7KB
    • SHA256 69572ff59d2f8b428fa2e5fad4c6abfaa78813b889740a0b17c3bf4ff522f2c7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Spymax 4.0/res/Plugins/Android/gen-7.pl
    • Size 5KB
    • SHA256 3a36e9b32c7bee100d590a31b8e622a229c6168e2fcd95dbd9fa934025e6787b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Spymax 4.0/res/Plugins/Android/gen-8.pl
    • Size 4KB
    • SHA256 ed866f146cc3cec59e01c9ec18aa62d25590c9f789ec127c4c8d29350970edeb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

spymax
Score
10/10

behavioral1

Score
3/10

behavioral2

Score
3/10

behavioral3

discovery
Score
5/10

behavioral4

Score
1/10

behavioral5

discovery
Score
3/10

behavioral6

Score
1/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

Score
1/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

Score
3/10

behavioral28

Score
3/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

Score
3/10

behavioral32

Score
3/10