General

  • Target

    3d4f63fc88ec8a4dfc9a5c3fee1a59ded40bbb2f4f04ed937c135b144e8a166d.zip

  • Size

    3.6MB

  • Sample

    240306-hxglwadg4w

  • MD5

    5b747e0c40d01977055baec510b428db

  • SHA1

    b28b2774b0f38ecfb2142cf86aeae971b983aef7

  • SHA256

    b59d81e9097ebc5d3f09cd52393e5ac5727d6e676ee87f8913bf3c403002bff8

  • SHA512

    e5b6eff40521f94a0b39ee53b40ebafc712941c37f5a9d6afe8f798dd696a48ca5d3a7c6568f55426c57742bdeec8a93d4965d32546f93370dae8f3adf74773f

  • SSDEEP

    98304:w92dv1k5/sw9JK996LnmH6vYmNzweTWgQ:7v1I/sw9JKD6qH6vYKzwEW9

Malware Config

Extracted

Family

godfather

C2

https://t.me/kuterocaviroski

Targets

    • Target

      3d4f63fc88ec8a4dfc9a5c3fee1a59ded40bbb2f4f04ed937c135b144e8a166d.apk

    • Size

      4.4MB

    • MD5

      5d082ee96d47c95b57141c58c1101556

    • SHA1

      0933eb400c15bdbbc075dbfb447cc81c2308e035

    • SHA256

      3d4f63fc88ec8a4dfc9a5c3fee1a59ded40bbb2f4f04ed937c135b144e8a166d

    • SHA512

      8577dad81c288504f202a399a8656bd641640cb7c2fe53fbc0fa383d8808bbf322393267a0e6ea54ede5e4c11f9d37fccfb647fbdca5cba5f920dce9bbeaa5bc

    • SSDEEP

      98304:JaG20AJgNs1g1j1sv4dDv23eAbwdclxBfefdyoMOzfr9+fh:UG29gN9UydSccxB2fdy3Fh

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Removes its main activity from the application launcher

    • Requests enabling of the accessibility settings.

    • Acquires the wake lock

MITRE ATT&CK Mobile v15

Tasks