General
- Target android.taks.apk
- Size 3.7MB
- Sample260511-rl11tab19v
- SHA256 149319e5317cb78981e78e1ffb27fd9f21cad06f74049a60dc5bd16aa13c881f
- MD5 f6c7f67fd79db2e09dea3b78633e4834
- SHA1 b683fbfcda1832a4da0a911a4800d111bcef7f92
- SHA512 3b11dbe2881071f3347a3ba11fc60cc23327bdfefc005f3b729c2e01165e8ed4f6085ad1c1d263dc66d2af21d0a59ea19268103a2bb1369098b253251e47f482
- SSDEEP 98304:JQvrxhW2GOm+fIWNtNC00mmzpzB6TL0t8KhLO:JQvdht/m+fDN90Rz+0B8
- TLSH T16206E003FF89CAD7D4BA83F56B330CA91A171F54C643AAD704153A6E2EB71C54D86A8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
android.taks.apk
Resource
android-x86-arm-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
android.taks.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
android.taks.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
spynote
C2
-
jdaxubtkvy.localto.net:6766
Targets
-
- Target android.taks.apk
- Size 3.7MB
- SHA256 149319e5317cb78981e78e1ffb27fd9f21cad06f74049a60dc5bd16aa13c881f
- MD5 f6c7f67fd79db2e09dea3b78633e4834
- SHA1 b683fbfcda1832a4da0a911a4800d111bcef7f92
- SHA512 3b11dbe2881071f3347a3ba11fc60cc23327bdfefc005f3b729c2e01165e8ed4f6085ad1c1d263dc66d2af21d0a59ea19268103a2bb1369098b253251e47f482
- SSDEEP 98304:JQvrxhW2GOm+fIWNtNC00mmzpzB6TL0t8KhLO:JQvdht/m+fDN90Rz+0B8
- TLSH T16206E003FF89CAD7D4BA83F56B330CA91A171F54C643AAD704153A6E2EB71C54D86A8C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Queries information about active data network
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
Requests enabling of the accessibility settings.