Overview

overview

10

Static

static

10

YarVayrla ...es.apk

android-11-x64

8

Resubmissions

11/07/2026, 14:01

260711-rbxwead14v10

11/07/2026, 13:14

260711-qgnn9abv6l10

Sharing

Copy URL Twitter E-mail

General

  • Target
    YarVayrla Forcaries.apk
  • Size 8.5MB
  • Sample260711-rbxwead14v
  • SHA256 aee868c6175fb010801ddaf237872bd61edb15b9e7c1782a1dd5dac2d0dff918
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
spynoteandroidbankercollectioncredential_accessdefense_evasionevasionexecutioninfostealerpersistenceratstealthtrojan

Malware Config

Extracted

Family

  • spynote

C2

  • ajnbz-82-48-175-217.run.pinggy-free.link:34579

Targets

    • Target
      YarVayrla Forcaries.apk
    • Size 8.5MB
    • SHA256 aee868c6175fb010801ddaf237872bd61edb15b9e7c1782a1dd5dac2d0dff918
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    collectioncredential_accessdefense_evasionevasionexecutionpersistencestealthtrojan

    • Removes its main activity from the application launcher

      stealthtrojanevasion

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectiondefense_evasioncredential_access

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      defense_evasionpersistence
    behavioral1

MITRE ATT&CK Mobile v16

Tasks