General
- Target android.taks.apk
- Size 3.7MB
- Sample260511-rl11tab19v
- SHA256 149319e5317cb78981e78e1ffb27fd9f21cad06f74049a60dc5bd16aa13c881f
- MD5 f6c7f67fd79db2e09dea3b78633e4834
- SHA1 b683fbfcda1832a4da0a911a4800d111bcef7f92
- SHA512 3b11dbe2881071f3347a3ba11fc60cc23327bdfefc005f3b729c2e01165e8ed4f6085ad1c1d263dc66d2af21d0a59ea19268103a2bb1369098b253251e47f482
- SSDEEP 98304:JQvrxhW2GOm+fIWNtNC00mmzpzB6TL0t8KhLO:JQvdht/m+fDN90Rz+0B8
- TLSH T16206E003FF89CAD7D4BA83F56B330CA91A171F54C643AAD704153A6E2EB71C54D86A8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
android.taks.apk
Resource
android-x86-arm-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
android.taks.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
android.taks.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
spynote
C2
-
jdaxubtkvy.localto.net:6766
Targets
-
- Target android.taks.apk
- Size 3.7MB
- SHA256 149319e5317cb78981e78e1ffb27fd9f21cad06f74049a60dc5bd16aa13c881f
- MD5 f6c7f67fd79db2e09dea3b78633e4834
- SHA1 b683fbfcda1832a4da0a911a4800d111bcef7f92
- SHA512 3b11dbe2881071f3347a3ba11fc60cc23327bdfefc005f3b729c2e01165e8ed4f6085ad1c1d263dc66d2af21d0a59ea19268103a2bb1369098b253251e47f482
- SSDEEP 98304:JQvrxhW2GOm+fIWNtNC00mmzpzB6TL0t8KhLO:JQvdht/m+fDN90Rz+0B8
- TLSH T16206E003FF89CAD7D4BA83F56B330CA91A171F54C643AAD704153A6E2EB71C54D86A8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
Acquires the wake lock
Queries information about active data network
Requests disabling of battery optimizations (often used to enable hiding in the background).
Requests enabling of the accessibility settings.