General

  • Target

    594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d.bin

  • Size

    3.7MB

  • Sample

    240601-2t1ecsac76

  • MD5

    f8540764ac58575f150cc992ad241a5d

  • SHA1

    eccc50efe5dd4d494b572433a39efa08d8092482

  • SHA256

    594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d

  • SHA512

    1ac4e29275a3aa70990c26973333e36b5d62b22ca854642fc8295a36f8a9f0e8dcc0cb9ae372f0c49c3b715516af4eefc0bbba87d9bbb22ba59f72f2e0f8f2a9

  • SSDEEP

    98304:ry/wVk+PJgvJQ4boVqLcIJVryNaalQ1szWsUxJ:ry/8YU2PryrJKsUT

Malware Config

Extracted

Family

godfather

C2

https://t.me/intpravitokasero

Targets

    • Target

      594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d.bin

    • Size

      3.7MB

    • MD5

      f8540764ac58575f150cc992ad241a5d

    • SHA1

      eccc50efe5dd4d494b572433a39efa08d8092482

    • SHA256

      594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d

    • SHA512

      1ac4e29275a3aa70990c26973333e36b5d62b22ca854642fc8295a36f8a9f0e8dcc0cb9ae372f0c49c3b715516af4eefc0bbba87d9bbb22ba59f72f2e0f8f2a9

    • SSDEEP

      98304:ry/wVk+PJgvJQ4boVqLcIJVryNaalQ1szWsUxJ:ry/8YU2PryrJKsUT

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Acquires the wake lock

MITRE ATT&CK Mobile v15

Tasks