General

  • Target

    bf39ff449d9f0478caa34551a599d0abc289807005e08beb408fd9cbfe1e0c9e.bin

  • Size

    4.6MB

  • Sample

    240713-1ykc9s1ere

  • MD5

    e8743dfbffad087665ed151ff395049c

  • SHA1

    bb37641c0744133778f1c5fc98222ffbd14935d8

  • SHA256

    bf39ff449d9f0478caa34551a599d0abc289807005e08beb408fd9cbfe1e0c9e

  • SHA512

    48f2ad31c4d5d9fc5b7a21cb49895be84d1c6d8f3be5940a68690eccfac2da7a20802301e5538bdba3f4cf9d6531730ae93cf025529b689fba8c50d4adf47c37

  • SSDEEP

    98304:QWyNh4SAXdV3Z08k0rjehBJi73+eiRORxiC1lKNOe:QtNGRRkM6/ZebRplKNOe

Malware Config

Extracted

Family

godfather

C2

https://t.me/yazmozaramekos

Targets

    • Target

      bf39ff449d9f0478caa34551a599d0abc289807005e08beb408fd9cbfe1e0c9e.bin

    • Size

      4.6MB

    • MD5

      e8743dfbffad087665ed151ff395049c

    • SHA1

      bb37641c0744133778f1c5fc98222ffbd14935d8

    • SHA256

      bf39ff449d9f0478caa34551a599d0abc289807005e08beb408fd9cbfe1e0c9e

    • SHA512

      48f2ad31c4d5d9fc5b7a21cb49895be84d1c6d8f3be5940a68690eccfac2da7a20802301e5538bdba3f4cf9d6531730ae93cf025529b689fba8c50d4adf47c37

    • SSDEEP

      98304:QWyNh4SAXdV3Z08k0rjehBJi73+eiRORxiC1lKNOe:QtNGRRkM6/ZebRplKNOe

    Score
    4/10
    • Target

      up.apk

    • Size

      3.9MB

    • MD5

      cadcdd80097837833441b7678880b08a

    • SHA1

      54949a1d1632def164ccfdb6b6e3c2fe747c11af

    • SHA256

      4e96adbd4804b0a97e19eac232e0bf3c32f809f8d509c3f46f181559714d4fd5

    • SHA512

      60bdbf4a83deb39a8721a7c63569d6780450aea6c060c9de49f57df4b3020a8dff6c015b430d766ade86a4196fc789fb537203b00ce814410c9ab69ffbfcb8e4

    • SSDEEP

      98304:mYxFJG3Weyg6e31JoZi8K+YbMC84drWSA5:mKz+Gg6cDF+wE4cS+

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

MITRE ATT&CK Mobile v15

Tasks