General

  • Target

    Gigabud.zip

  • Size

    11.5MB

  • MD5

    427bc48d4a558b62b6e6c18f6b4b3850

  • SHA1

    ba6991a477343bc80d5cba26c3888b88b34fb9e6

  • SHA256

    e778be6a46a47c62e94caf5e79c603c808d794a4b970dcb38400c0b9e26cfc2d

  • SHA512

    76b7dcaebc180c99872578a50076d82bee21899564b852406e9fa6053c216dc0f02d236c306fbe02e8c22efd3d08b229c840a86a1fb34c7b1ad7b637977a5e4c

  • SSDEEP

    196608:BTKkFYscPr9eqYdHowlLcXkKjCPHDJOVSr0tr9+FQKOwduhr6JrE/I7pVeP:BTKkasOZeZIkcXjjCPHDL0QaKOUxwdP

Score
10/10

Malware Config

Extracted

Family

gigabud

C2

http://kbap1.cc/x/command?token=

http://8.219.85.91:8888/push-streaming?id=1234

Signatures

  • Gigabud family
  • Requests dangerous framework permissions 9 IoCs

Files

  • Gigabud.zip
    .zip

    Password: infected

  • 570d051b3bc3e982c90785b89678020651c4ef87c2ad6102957c95bb38e9b1f4
    .apk android arch:arm

    com.pp.checklist

    com.mobilelive.sho.activity.SplashActivity