General

  • Target

    b6d214c58522d8c2ad5ddc3c496cdbb864794b81b5dc1da10d88929353acd617.bin

  • Size

    3.7MB

  • Sample

    240509-1xm3rsgh3w

  • MD5

    05781192a3945575577091bdae8821b8

  • SHA1

    1326ed12253a5a8cf4a0da8b764be81edae7829c

  • SHA256

    b6d214c58522d8c2ad5ddc3c496cdbb864794b81b5dc1da10d88929353acd617

  • SHA512

    c0fa2a6829615e12dbb19476ed7b39c4852370ae4386dd3513b0d5ad05515de5ad8b42614dadcc774bd7c83af2422737051ae9a521f4c502b2ad72b10d8e665d

  • SSDEEP

    98304:EAmuECVyE78uJDvnrrT6qCYtEXvX7kI9UtsuiD:HWu1r3nCBrk5CuiD

Malware Config

Extracted

Family

godfather

C2

https://t.me/intpravitokasero

Targets

    • Target

      b6d214c58522d8c2ad5ddc3c496cdbb864794b81b5dc1da10d88929353acd617.bin

    • Size

      3.7MB

    • MD5

      05781192a3945575577091bdae8821b8

    • SHA1

      1326ed12253a5a8cf4a0da8b764be81edae7829c

    • SHA256

      b6d214c58522d8c2ad5ddc3c496cdbb864794b81b5dc1da10d88929353acd617

    • SHA512

      c0fa2a6829615e12dbb19476ed7b39c4852370ae4386dd3513b0d5ad05515de5ad8b42614dadcc774bd7c83af2422737051ae9a521f4c502b2ad72b10d8e665d

    • SSDEEP

      98304:EAmuECVyE78uJDvnrrT6qCYtEXvX7kI9UtsuiD:HWu1r3nCBrk5CuiD

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Acquires the wake lock

MITRE ATT&CK Mobile v15

Tasks