An in-depth analysis of SpyNote remote access trojan
Tags
cmtmf-attack-pattern: Location Tracking Masquerade As Legitimate Application
attack-pattern: Data Access Contact List - T1432 Software Discovery - T1418 Location Tracking - T1430 Malware - T1587.001 Malware - T1588.001 Masquerade As Legitimate Application - T1444 Server - T1583.004 Server - T1584.004 Software - T1592.002 Spearphishing Attachment - T1566.001 Spearphishing Attachment - T1598.002 Tool - T1588.002 Spearphishing Attachment - T1193 Uncommonly Used Port - T1065 Spearphishing Attachment
Show in Graph
Common Information
Type Value
UUID f491a30f-0835-4f95-b1ef-a019ab79f896
Fingerprint 7c2bbc10b9322f8d
Analysis status DONE
Considered CTI value 0
Text language
Published July 15, 2020, midnight
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 14, 2024, 6:08 a.m.
Headline An in-depth analysis of SpyNote remote access trojan
Title An in-depth analysis of SpyNote remote access trojan
Detected Hints/Tags/Attributes 64/2/10
Source URLs
Redirection Url
Details Source https://bulldogjob.pl/articles/1200-an-in-depth-analysis-of-spynote-remote-access-trojan
URL Provider
Details Provider Source level domain
Details bulldogjob.pl bulldogjob.pl
Attributes
Details Type #Events CTI Value
Details Domain 188 
com.android
Details Domain 1 
string.gp
Details Domain 6 
java.util.zip
Details File 172 
androidmanifest.xml
Details File 4 
google.apk
Details File 35 
strings.xml
Details File 20 
android.settings
Details File 1 
tester.c4
Details File 1 
configdd-mm-yyy.log
Details File 6 
util.zip