Resubmissions

11/05/2026, 19:07

260511-xsv12acv5m10

11/05/2026, 14:34

260511-rxyd3afy8q10

11/05/2026, 14:17

260511-rl11tab19v10

General

  • Target
    android.taks.apk
  • Size 3.7MB
  • Sample260511-rl11tab19v
  • SHA256 149319e5317cb78981e78e1ffb27fd9f21cad06f74049a60dc5bd16aa13c881f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • spynote

C2
  • jdaxubtkvy.localto.net:6766

Targets

    • Target
      android.taks.apk
    • Size 3.7MB
    • SHA256 149319e5317cb78981e78e1ffb27fd9f21cad06f74049a60dc5bd16aa13c881f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Queries information about active data network

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v16

Tasks