General

  • Target

    e0e5bace7224aff2e742b393b572f6de8c425b7deb2fa6397a7445d1127de1fc.bin

  • Size

    3.7MB

  • Sample

    240514-1yattsbb26

  • MD5

    74f63d7c8e51f07b83ddc0c09c009d92

  • SHA1

    d005c80d45d759e9a550568f04dfb7d0df227627

  • SHA256

    e0e5bace7224aff2e742b393b572f6de8c425b7deb2fa6397a7445d1127de1fc

  • SHA512

    2c593406dbfb156144cf52db27f63dae48d297a8e010910301e2d3b9c79aa0a3d7df471d8e9130e2046f06bfe4e2710078482d093fb6c5c72c55418c67190402

  • SSDEEP

    98304:nX65cXbElRY6Kt4EBPosjC/SbXIKekoUSWr:nX6aElRYW+PosjC/S8ITSWr

Malware Config

Extracted

Family

godfather

C2

https://t.me/intpravitokasero

Targets

    • Target

      e0e5bace7224aff2e742b393b572f6de8c425b7deb2fa6397a7445d1127de1fc.bin

    • Size

      3.7MB

    • MD5

      74f63d7c8e51f07b83ddc0c09c009d92

    • SHA1

      d005c80d45d759e9a550568f04dfb7d0df227627

    • SHA256

      e0e5bace7224aff2e742b393b572f6de8c425b7deb2fa6397a7445d1127de1fc

    • SHA512

      2c593406dbfb156144cf52db27f63dae48d297a8e010910301e2d3b9c79aa0a3d7df471d8e9130e2046f06bfe4e2710078482d093fb6c5c72c55418c67190402

    • SSDEEP

      98304:nX65cXbElRY6Kt4EBPosjC/SbXIKekoUSWr:nX6aElRYW+PosjC/S8ITSWr

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Acquires the wake lock

MITRE ATT&CK Mobile v15

Tasks