Overview

overview

10

Static

static

10

ready.apk

android-10-x64

7

ready.apk

android-11-x64

7

ready.apk

android-13-x64

7

ready.apk

android-14-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    ready.apk
  • Size 3.7MB
  • Sample260810-addrwafp8t
  • SHA256 ca53f94f4a75bc5d42df92e04442efc6a7a8503d2b3b517b8b0e6efeff570b92
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
spynoteandroidbankercollectioncredential_accessdefense_evasiondiscoveryexecutioninfostealerpersistencerattrojan

Malware Config

Extracted

Family

  • spynote

C2

  • 7326.info:2686

Targets

    • Target
      ready.apk
    • Size 3.7MB
    • SHA256 ca53f94f4a75bc5d42df92e04442efc6a7a8503d2b3b517b8b0e6efeff570b92
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    collectioncredential_accessdefense_evasiondiscoveryexecutionpersistence

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectiondefense_evasioncredential_access

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      defense_evasionpersistence

    • Queries information about active data network

      discovery
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Mobile v16

Tasks