General
- Target ready.apk
- Size 13.4MB
- Sample261112-scshrahs8s
- SHA256 1ca2a4da6bc63a7172d6f64b0a46818345c84dd8f3cf97c02e57da39171ca735
- MD5 0b320e212bf3fe2c8fa7e3228416574f
- SHA1 703e053750bcd6f15d8192f987c2e410b8c91105
- SHA512 11df49bb0c224a2e034ec5c2a63bdb278f5336ea7ac280045d7778ed4c1dac3996a439cfa042486d9a9013df88605d35ec0eec9348ec7f216208a631f64d5286
- SSDEEP 49152:WAHkCJptS6mbU9A+KwZXhOBsyHCxqCeFlmzJzdGGMQTOZtUnYqA0cgRK6a:hHVXtS6A/+KwhNyHCxalmzJzBrTE0tRk
- TLSH T138E6F017F915CAD6C4AC83F46A130FA82B671F5995822EEB20183B5E3FB61CA4DD54CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-34-x64-arm64-20260325.1-en
5 signatures
900 seconds
Malware Config
Targets
-
- Target ready.apk
- Size 13.4MB
- SHA256 1ca2a4da6bc63a7172d6f64b0a46818345c84dd8f3cf97c02e57da39171ca735
- MD5 0b320e212bf3fe2c8fa7e3228416574f
- SHA1 703e053750bcd6f15d8192f987c2e410b8c91105
- SHA512 11df49bb0c224a2e034ec5c2a63bdb278f5336ea7ac280045d7778ed4c1dac3996a439cfa042486d9a9013df88605d35ec0eec9348ec7f216208a631f64d5286
- SSDEEP 49152:WAHkCJptS6mbU9A+KwZXhOBsyHCxqCeFlmzJzdGGMQTOZtUnYqA0cgRK6a:hHVXtS6A/+KwhNyHCxalmzJzBrTE0tRk
- TLSH T138E6F017F915CAD6C4AC83F46A130FA82B671F5995822EEB20183B5E3FB61CA4DD54CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Family: Spynote
Spynote is a Remote Access Trojan first seen in 2017.
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
Acquires the wake lock
Requests disabling of battery optimizations (often used to enable hiding in the background).