General
- Target aaseoy_2.2.6_82375752.apk
- Size 26.7MB
- Sample260302-ldevqafy2a
- SHA256 7ec1cbd8c767a3d87a62fa7da3574da2ba56df753511609bd8d179bc1d2d635e
- MD5 91d2b6f18b178de65149006da8585cbd
- SHA1 1fc3cf1a47a06c5a2eaf848b43585cfdf6168d1e
- SHA512 6cf321a0deec285be494180c6f24e0bbfcca03125febdd16d82ed189a7a27222add0e657511b0f04f00679c5415a4ed27bf478d886f06be1e0b6701c2c8046a4
- SSDEEP 786432:FBS1GPzROtfXyvY9Txn8jz7vAMmMyqCG6C6zY81wptWP:FUQUNyA9TxnuwMmMyqCG5JgP
- TLSH T102573397FB28883FC5FA12B39D6A113277729E0486926B173984772C2D3365D4F89BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Malware Config
Extracted
Family
-
spyloan
C2
-
https://6nfk1oop2kry.xszc666.com/
-
https://J7mkI8.b3h5n3c0.work
AES_key
Targets
-
- Target aaseoy_2.2.6_82375752.apk
- Size 26.7MB
- SHA256 7ec1cbd8c767a3d87a62fa7da3574da2ba56df753511609bd8d179bc1d2d635e
- MD5 91d2b6f18b178de65149006da8585cbd
- SHA1 1fc3cf1a47a06c5a2eaf848b43585cfdf6168d1e
- SHA512 6cf321a0deec285be494180c6f24e0bbfcca03125febdd16d82ed189a7a27222add0e657511b0f04f00679c5415a4ed27bf478d886f06be1e0b6701c2c8046a4
- SSDEEP 786432:FBS1GPzROtfXyvY9Txn8jz7vAMmMyqCG6C6zY81wptWP:FUQUNyA9TxnuwMmMyqCG5JgP
- TLSH T102573397FB28883FC5FA12B39D6A113277729E0486926B173984772C2D3365D4F89BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
SpyLoan
SpyLoan is an Android malware that pretends to be a legitimate loan app first seen in December 2023.
Spyloan family
Queries information about active data network
Reads information about phone network operator.