Resubmissions

05/03/2026, 19:15

260305-xyamaaax3z

05/03/2026, 19:10

260305-xvr26aax2v10

03/03/2026, 14:05

260303-rd357sat3x10

General

  • Target
    9c4b5a4d8766b7afd264f9b0c5a50dfa9572516b3b09cab43846137c251a752a.bin.zip
  • Size 57.0MB
  • Sample260303-rd357sat3x
  • SHA256 9c4b5a4d8766b7afd264f9b0c5a50dfa9572516b3b09cab43846137c251a752a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • spynote

C2
  • 188.212.101.133:8000

  • 1.tcp.sa.ngrok.io:26109

  • 192.9.175.87:4443

Extracted

Family
  • spynote

C2
  • 188.212.101.133:8000

  • 1.tcp.sa.ngrok.io:26109

Extracted

Family
  • spynote

C2
  • for-nails.gl.at.ply.gg:33645

  • 0.tcp.eu.ngrok.io:15517

  • 45.33.120.118:8173

  • prev-labels.gl.at.ply.gg:7691

  • 102.217.238.0:5214

  • navigation-zones.gl.at.ply.gg:17761

Extracted

Family
  • mobileorder

C2
  • blackbeekey.com

  • k7k7.co

Attributes
  • user_agent

    Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt)

Signatures

  • Ermac family
  • Ermac2 payload 1 IoCs
  • Mobileorder family
  • SLocker payload 9 IoCs
  • Slocker family
  • Spynote family
  • Spynote payload 9 IoCs
  • Wipelock Android payload 3 IoCs
  • Wipelock family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 23 IoCs
  • Codesign digest Mismatch 10 IoCs

    File was altered after it was signed.

  • Insecure Codesign Algorithm 79 IoCs

    File was codesigned using an insecure algorithm.

  • Unsigned APK 1 IoCs

    Checks for missing APK codesign signature.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 100 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 9c4b5a4d8766b7afd264f9b0c5a50dfa9572516b3b09cab43846137c251a752a.bin.zip
    .zip 57.0MB
  • AlSalah.apk
    .apk 113KB
  • Android Defender.apk
    .apk 1.5MB
  • App2Card 2.8.2.APK
    .apk 2.9MB
  • Application Petya screen locker.exe
    .exe 391KB
  • BaDoink.apk
    .apk 309KB
  • Barsik.apk
    .apk 251KB
  • Battery Doctor.apk
    .apk 517KB
  • BotWhatsAppAssistant.apk
    .apk 197KB
  • Bowling Time (1).apk
    .apk 829KB
  • sqlite.db
    .apk 13KB
  • Bowling Time.apk
    .apk 829KB
  • sqlite.db
    .apk 13KB
  • CMAccessIndex.apk
    .apk 197KB
  • Certificate.apk
    .apk 38KB
  • Charlie-the-steak-virus.apk
    .apk 673KB
  • CraxsApp.apk
    .apk 1.9MB
  • Cut The Rope Unlock.apk
    .apk 88KB
  • DHL Paket.apk
    .apk 432KB
  • Dendroid.apk
    .apk 920KB
  • ELOSTORA VIRUS.apk
    .apk 65KB
  • Elite (1).apk
    .apk 533KB
  • Elite.apk
    .apk 533KB
  • Emprestimo verify.apk
    .apk 1.3MB
  • Ermac-V2 Apk.apk
    .apk 994KB
  • Evenix Clicker.apk
    .apk 95KB
  • Extension.apk
    .apk 256KB
  • Free Followers (1).apk
    .apk 2.7MB
  • Free Followers.apk
    .apk 2.7MB
  • Google App Store.apk
    .apk 225KB
  • Google Service.apk
    .apk 783KB
  • Google Themes Provider.apk
    .apk 121KB
  • GoogleDalvik.apk
    .apk 52KB
  • GoogleKernel.apk
    .apk 52KB
  • GooglePlay.apk
    .apk 700KB
  • GoogleSystem.apk
    .apk 1.7MB
  • HTC IQAgent.apk
    .apk 21KB
  • HTC Loggers (1).apk
    .apk 100KB
  • HTC Loggers.apk
    .apk 100KB
  • Hotel CN.apk
    .apk 791KB
  • Installer.apk
    .apk 125KB
  • Linux Installer_signed.apk
    .apk 184KB
  • MBackup.apk
    .apk 153KB
  • Marcher_58FB8F875F3C9ACF0FD0C4EE3C0A002A.apk
    .apk 562KB
  • MemoryGoodChat.apk
    .apk 197KB
  • Mobile Security.apk
    .apk 789KB
  • NewProject2_release.apk
    .apk 549KB
  • Nubank.apk
    .apk 1.3MB
  • PDF Reader Upgrade.apk
    .apk 813KB
  • PPDB Jateng.apk
    .apk 807KB
  • PerfectOneSystem.apk
    .apk 197KB
  • Platina Host.apk
    .apk 764KB
  • Play Protect.apk
    .apk 792KB
  • Private Chat (1).apk
    .apk 1.5MB
  • Private Chat.apk
    .apk 1.5MB
  • QQ grabs red envelops (QQ抢红包).apk
    .apk 421KB
  • Ricardo Fight 2(Online).apk
    .apk 287KB
  • SD Booster.apk
    .apk 250KB
  • Saavn.apk
    .apk 950KB
  • Security Space.apk
    .apk 576KB
  • Settings Pro.apk
    .apk 77KB
  • SignalAddonChat.apk
    .apk 197KB
  • Super Ringtone Maker (1).apk
    .apk 420KB
  • sqlite.db
    .apk 13KB
  • Super Ringtone Maker.apk
    .apk 420KB
  • sqlite.db
    .apk 13KB
  • SweetSafeVector.apk
    .apk 197KB
  • Systeminformation.apk
    .apk 760KB
  • Telegram Premium.apk
    .apk 1006KB
  • The China Freedom Trap.apk
    .apk 342KB
  • The Holy Fucking Bible.apk
    .apk 1.8MB
  • UltraHack Pro.apk
    .apk 194KB
  • Virus (1).apk
    .apk 31KB
  • Virus.apk
    .apk 185KB
  • WiFi Kill Rus.apk
    .apk 484KB
  • YouPhone (1).apk
    .apk 754KB
  • YouPhone.apk
    .apk 754KB
  • admintool.apk
    .apk 112KB
  • android.apk
    .apk 40KB
  • base.apk
    .apk 634KB
  • brawl stars 2019 mod helowen.apk
    .apk 601KB
  • com.android.Materialflow.apk
    .apk 92KB
  • com.android.system.admin.apk
    .apk 82KB
  • com.android.tools.system.apk
    .apk 462KB
  • exteraGram(joke virus).apk
    .apk 798KB
  • g7im.apk
    .apk 760KB
  • gen_signed.apk
    .apk 184KB
  • jadear fácilmente (1).apk
    .apk 635KB
  • jadear fácilmente.apk
    .apk 635KB
  • last_version_mode38281837472.apk
    .apk 456KB
  • test.apk
    .apk 325KB
  • wifi hack rif.apk
    .apk 71KB
  • xhelper.apk
    .apk 252KB
  • xtube.apk
    .apk 428KB
  • Кастомка(Китайский).apk
    .apk 194KB
  • Приложение-Радио(Арабский).apk
    .apk 1.8MB
  • СП УНКИ.apk
    .apk 392KB
  • Сибирь 2 мод на сохранение.apk
    .apk 362KB
  • Установка....apk
    .apk 865KB
  • Установка.apk
    .apk 461KB
  • загляни, сосунок.apk
    .apk 134KB
  • համասեռամոլ 1.0.apk
    .apk 108KB
  • اخترق.apk
    .apk 676KB

9c4b5a4d8766b7afd264f9b0c5a50dfa9572516b3b09cab43846137c251a752a.bin.zip

  • SHA256 9c4b5a4d8766b7afd264f9b0c5a50dfa9572516b3b09cab43846137c251a752a
  • MD5 SHA1 SHA512 SSDEEP TLSH