General

  • Target

    fefb6212e55b5b9569d8763ff469b32afb08ee88fa96fdfe1152c1d247309077.bin

  • Size

    3.7MB

  • Sample

    240715-1zejeatgph

  • MD5

    c72963285bbfc241f6f7cbac4c29ca51

  • SHA1

    7f614d37327affb9201c28fa680c7874efc005be

  • SHA256

    fefb6212e55b5b9569d8763ff469b32afb08ee88fa96fdfe1152c1d247309077

  • SHA512

    e5a97da92c99e3e832c037b900d726b53b63830fc2908612d266c2549d6cbf7fd5279fc393cd597ad7570d7ab504c05aaf633e63dbd46265e82717f592836562

  • SSDEEP

    98304:9P1DDmLU1I3+CfKTAYIU0WbN6og3N6iPu0s+AiHZgUU0I:fD3215tUJ/g3fPWBitU0I

Malware Config

Extracted

Family

godfather

C2

https://t.me/mazokoveraser

Targets

    • Target

      fefb6212e55b5b9569d8763ff469b32afb08ee88fa96fdfe1152c1d247309077.bin

    • Size

      3.7MB

    • MD5

      c72963285bbfc241f6f7cbac4c29ca51

    • SHA1

      7f614d37327affb9201c28fa680c7874efc005be

    • SHA256

      fefb6212e55b5b9569d8763ff469b32afb08ee88fa96fdfe1152c1d247309077

    • SHA512

      e5a97da92c99e3e832c037b900d726b53b63830fc2908612d266c2549d6cbf7fd5279fc393cd597ad7570d7ab504c05aaf633e63dbd46265e82717f592836562

    • SSDEEP

      98304:9P1DDmLU1I3+CfKTAYIU0WbN6og3N6iPu0s+AiHZgUU0I:fD3215tUJ/g3fPWBitU0I

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

MITRE ATT&CK Mobile v15

Tasks