General
- Target ready.apk
- Size 8.5MB
- Sample260708-kyyb5aex2k
- SHA256 c05c548ed484bf7fd391cdbaf3fa17738a3c2465807a46ee7dd0ede602de9965
- MD5 f757333f4ef553f1bf13a59550fdb9a1
- SHA1 781be9afec4921af9cc8af7e1011b6d7336f9ff0
- SHA512 be45c1ae28cef67a99e513f8e599743fbfc1a1a8895b2c6e2ffba35bbe9fca72480417f0e27cce5c6c1c6c7098aa83b0ae2a8c1b1d91f59c25825deb3d2e06b7
- SSDEEP 98304:QUrVjcoKm0nRENuMNanl7mzrzBeTx0tcS:prlcHm0nRJVMzAOF
- TLSH T16E96F107FD16CBC2C46D93F56E230FA96A231F18C5812AEB20193A5E3E766D21DD61DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-33-x64-arm64-20260325-en
Malware Config
Extracted
-
spynote
-
yfywx-114-73-60-11.run.pinggy-free.link:41189:34365
Targets
-
- Target ready.apk
- Size 8.5MB
- SHA256 c05c548ed484bf7fd391cdbaf3fa17738a3c2465807a46ee7dd0ede602de9965
- MD5 f757333f4ef553f1bf13a59550fdb9a1
- SHA1 781be9afec4921af9cc8af7e1011b6d7336f9ff0
- SHA512 be45c1ae28cef67a99e513f8e599743fbfc1a1a8895b2c6e2ffba35bbe9fca72480417f0e27cce5c6c1c6c7098aa83b0ae2a8c1b1d91f59c25825deb3d2e06b7
- SSDEEP 98304:QUrVjcoKm0nRENuMNanl7mzrzBeTx0tcS:prlcHm0nRJVMzAOF
- TLSH T16E96F107FD16CBC2C46D93F56E230FA96A231F18C5812AEB20193A5E3E766D21DD61DC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Foreground Persistence
1Hide Artifacts
1User Evasion
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1Discovery
System Information Discovery
2System Network Configuration Discovery
1System Network Connections Discovery
1