General

  • Target

    96120d1868c5471d7f9728411f244f0cdbc0e279cdee6f6705f772661c1305c4.bin

  • Size

    4.6MB

  • Sample

    240519-1zhaasce21

  • MD5

    8690d615d64773dca6f6300372b8a24d

  • SHA1

    0f6ddb687581fa33f484808b18608ec93e47cd9c

  • SHA256

    96120d1868c5471d7f9728411f244f0cdbc0e279cdee6f6705f772661c1305c4

  • SHA512

    a0b541f0175d7c2352008e096ccbee09e8f86d44a910098aea28b7935067ebf255562cc4e2303aadc844e36d7ed6a687b719fb4e0ab1dc5ab1f0f3af28dc6e50

  • SSDEEP

    98304:+98LUAzwcqAW2yvV5etZNEzoPM2Ro6xrOcBCWlPS2ulNQu:+98L55W2yvV5etZqK5oer34WlPS2u/Qu

Malware Config

Extracted

Family

godfather

C2

https://t.me/napikozaremossod

Targets

    • Target

      96120d1868c5471d7f9728411f244f0cdbc0e279cdee6f6705f772661c1305c4.bin

    • Size

      4.6MB

    • MD5

      8690d615d64773dca6f6300372b8a24d

    • SHA1

      0f6ddb687581fa33f484808b18608ec93e47cd9c

    • SHA256

      96120d1868c5471d7f9728411f244f0cdbc0e279cdee6f6705f772661c1305c4

    • SHA512

      a0b541f0175d7c2352008e096ccbee09e8f86d44a910098aea28b7935067ebf255562cc4e2303aadc844e36d7ed6a687b719fb4e0ab1dc5ab1f0f3af28dc6e50

    • SSDEEP

      98304:+98LUAzwcqAW2yvV5etZNEzoPM2Ro6xrOcBCWlPS2ulNQu:+98L55W2yvV5etZqK5oer34WlPS2u/Qu

    Score
    4/10
    • Target

      i.apk

    • Size

      3.9MB

    • MD5

      6615419f50a50c83a7f016b8b69389d9

    • SHA1

      ee8419a83608a8575114e609248704080fc239f2

    • SHA256

      3e6517f2b8f9e030801267672026b5f110caa4572f6d69e25cef59b99ac6241f

    • SHA512

      bab86d3b241f817c53f9b60bcf58e3cf20b08ebd76d670210630c3039fe428acabac85ecb8483eabc3c59ac2d35575a5a5a098d3857501588d3b936c70828084

    • SSDEEP

      98304:4Ncd3tL02yAC0vR7rdJgJvQz6h80tWAdy7vG9woQN0BRp:4Ny3IAC0vRUJ4wrWCyrG9wYRp

    • Prevents application removal

      Application may abuse the framework's APIs to prevent removal.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Acquires the wake lock

MITRE ATT&CK Mobile v15

Tasks