Overview

overview

10

Static

static

10

e0e5bace72...fc.apk

android-9-x86

7

e0e5bace72...fc.apk

android-10-x64

7

e0e5bace72...fc.apk

android-11-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    e0e5bace7224aff2e742b393b572f6de8c425b7deb2fa6397a7445d1127de1fc.bin
  • Size 3.7MB
  • Sample240514-1yattsbb26
  • SHA256 e0e5bace7224aff2e742b393b572f6de8c425b7deb2fa6397a7445d1127de1fc
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
godfatherandroidcollectioncredential_accessevasionimpactpersistence

Malware Config

Extracted

Family

  • godfather

C2

  • https://t.me/intpravitokasero

Targets

    • Target
      e0e5bace7224aff2e742b393b572f6de8c425b7deb2fa6397a7445d1127de1fc.bin
    • Size 3.7MB
    • SHA256 e0e5bace7224aff2e742b393b572f6de8c425b7deb2fa6397a7445d1127de1fc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    evasionimpactpersistencecollectioncredential_access

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectionevasioncredential_access

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      evasionpersistence

    • Acquires the wake lock

    behavioral1behavioral2behavioral3

MITRE ATT&CK Mobile v15

Tasks