actionspy | d6478b4b7f0ea38947d894b1a87baf4bed7a1ece934fff9dfc233610de232814

Resubmissions

01/05/2026, 11:37

260501-nrjryaez8y10

01/05/2026, 08:08

260501-j1px4ac19110

Sharing

Copy URL Twitter E-mail

General

Target
d6478b4b7f0ea38947d894b1a87baf4bed7a1ece934fff9dfc233610de232814
Size 1.1MB
Sample260501-j1px4ac191
SHA256 d6478b4b7f0ea38947d894b1a87baf4bed7a1ece934fff9dfc233610de232814
MD5 331578141f84b11077e3222b1d7d7785
SHA1 168284849a502334002256de6e094c1647a83648
SHA512 202a1c4e0fcac73e491a5e7e32dd4e376e7df12297c5f8733693757b41fcd6e0bda8ec671638f51d247fa885e14da18bfb8a62ab78855ed9396b1411ec7368ab
SSDEEP 24576:cWVHvqjAuUwt/IM5F4vCkU7mopuRpIpAmCfF4thxjluOdKLLz2w2SfQEKBedQY0x:cyvqMHe4vCkzSmDu5BucK72wnQExd10x
TLSH
T1EF4523590BCEA00ACD6FC373EA4D4287E145879D6118B0FBE5771298B4BEF692640CE6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  d6478b4b7f0ea38947d894b1a87baf4bed7a1ece934fff9dfc233610de232814
- Size 1.1MB
- SHA256 d6478b4b7f0ea38947d894b1a87baf4bed7a1ece934fff9dfc233610de232814
- MD5 331578141f84b11077e3222b1d7d7785
- SHA1 168284849a502334002256de6e094c1647a83648
- SHA512 202a1c4e0fcac73e491a5e7e32dd4e376e7df12297c5f8733693757b41fcd6e0bda8ec671638f51d247fa885e14da18bfb8a62ab78855ed9396b1411ec7368ab
- SSDEEP 24576:cWVHvqjAuUwt/IM5F4vCkU7mopuRpIpAmCfF4thxjluOdKLLz2w2SfQEKBedQY0x:cyvqMHe4vCkzSmDu5BucK72wnQExd10x
- TLSH
  T1EF4523590BCEA00ACD6FC373EA4D4287E145879D6118B0FBE5771298B4BEF692640CE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

collection credential_access defense_evasion discovery execution actionspy impact persistence spyware
- Android ActionSpy payload
- Family: ActionSpy
  ActionSpy is an Android spyware first seen in 2020.
  spyware actionspy
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection defense_evasion credential_access
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Requests dangerous framework permissions
behavioral1 behavioral2
- Target
  Camera.apk
- Size 143KB
- SHA256 a0a48d7e0762ab24b2ec3ec488b011db866992db5392926fe43dd3d1c398e30d
- MD5 fcf4e5cef35bf354ad334c4e7294fb97
- SHA1 05afe9b5319d8ec2bc0ef4700a0337cf56b45b37
- SHA512 a45d15f0a8af3febc3686edbd59d80030c6323d5a549e2453da8e721ff23a0043a9b8106553de26723643be14a0ec3be085c4002762dbfe3756d806582803f83
- SSDEEP 3072:53MCvCevSgOLakgvNgABVeNSz2lbSdmYmEnIeCfxoa7ddC+cilfVV0Jf73JB1WzV:53/vCevRkV8NgABY6wYn+/C+3Rq710Ia
- TLSH
  T1DEE3124A27F69018C96AE071F42FD15E6AC9C25D2298CDA7D25341F4EC7EEF83643836
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5
- Target
  Core.apk
- Size 162KB
- SHA256 1bbccaf5e0c5b46509eb1caae3a2f469d36a41727fe543fad7aa4e0a2d6c4a65
- MD5 5b5659115497f6a712f6ac227dc567a2
- SHA1 28f0e1737b152b3760371650471f92d73698e85a
- SHA512 017b5c5ca3ca7143064ebc2d58b00cdb9bcdca7e64f1ff5126b0bcf57ff596c125014a9fc108ec17195670271200ea4b4c917e0ec31097db89bbd3eae9dcca30
- SSDEEP 3072:RJNspmN83aNl6wkL6adOyPF8wIBmN0uyZjfIbEhyJf1AZfGHwvgOgwBp:RApF3oKuaoyPFyBmNRyZjgbEwJdAZf+u
- TLSH
  T1AAF31257AE8EA987EECFD3B303CE80D9A5440B86364033A3E131911DFCB5B065996DD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7 behavioral8
- Target
  Location.apk
- Size 412KB
- SHA256 eff30f6cc2d5d04ce4aef0c50f1fb375fb817a803bf3e8e08c847f04658185ba
- MD5 8fbb8e281ea00e19cb98ea6b63ffd09e
- SHA1 d54dc46369cbaea13b8248263b3b10275b0e28dd
- SHA512 c9f0ea92881d2f2512c2e0d98475c250ff70cc9cd33087f50849146c98421bf8165d529b9b9c1c077a061b0484e05176973e31280a83a818d0479394f03dd370
- SSDEEP 12288:oMWYbbxpIpoF/9BGPM+Cf31aVeZZyvMTZ0xjluOdj:ouRpIpAmCfF4thxjluOdj
- TLSH
  T1859423045FEDE316DF0FC3B7AE04068BD797525C982A6065F076A3D6657AC342174CCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9