General
-
Target
6e14eae9240c8b2bf57518da4df1554eed25c78f40bf9ba3ab855dc298b4aede.bin
-
Size
4.5MB
-
Sample
240717-1z6ynavdkg
-
MD5
13e74cc589c17226fae45d8f54cca7f6
-
SHA1
c1476fbbfab443a501fbc2dfd83b94ed78ac9966
-
SHA256
6e14eae9240c8b2bf57518da4df1554eed25c78f40bf9ba3ab855dc298b4aede
-
SHA512
4240ad7306e98b3af711e4ea7c765606eaf3809c93a4b02b724ca6193f7c8ac96ab7a82dc0616f58ece08835d123cfba95dae93aba0938f31498ec4957941069
-
SSDEEP
98304:Khe1xANJ0nWPrlkoSUoJ2t75IYpHELTkpmWJoRitc6tO3O6u2E2KzmMg:LWRCCIYefkNJoRMc6MXE2KzmMg
Behavioral task
behavioral1
Sample
6e14eae9240c8b2bf57518da4df1554eed25c78f40bf9ba3ab855dc298b4aede.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
6e14eae9240c8b2bf57518da4df1554eed25c78f40bf9ba3ab855dc298b4aede.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
6e14eae9240c8b2bf57518da4df1554eed25c78f40bf9ba3ab855dc298b4aede.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
up.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral5
Sample
up.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral6
Sample
up.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Extracted
godfather
https://t.me/mazokoveraser
Targets
-
-
Target
6e14eae9240c8b2bf57518da4df1554eed25c78f40bf9ba3ab855dc298b4aede.bin
-
Size
4.5MB
-
MD5
13e74cc589c17226fae45d8f54cca7f6
-
SHA1
c1476fbbfab443a501fbc2dfd83b94ed78ac9966
-
SHA256
6e14eae9240c8b2bf57518da4df1554eed25c78f40bf9ba3ab855dc298b4aede
-
SHA512
4240ad7306e98b3af711e4ea7c765606eaf3809c93a4b02b724ca6193f7c8ac96ab7a82dc0616f58ece08835d123cfba95dae93aba0938f31498ec4957941069
-
SSDEEP
98304:Khe1xANJ0nWPrlkoSUoJ2t75IYpHELTkpmWJoRitc6tO3O6u2E2KzmMg:LWRCCIYefkNJoRMc6MXE2KzmMg
Score4/10 -
-
-
Target
up.apk
-
Size
3.7MB
-
MD5
21f1b0b33ff48b6c8b8f6b5e95b96fa9
-
SHA1
0444c98c048c0de65adc2e920955d4bb99ae41e7
-
SHA256
103f2a0a29c230f3cc3249e49dcf9dd9e98396bc90dff2629aca1c54d8ac51d7
-
SHA512
0eed972fa8d2fe172ef6db7c28dd4e32b9ce1c5fcc2ced2627f03f436c7597c756c310a86f36a07f3c29fe1a264ff81236a77804ec002f01a6922a9beca1c189
-
SSDEEP
98304:qAslPP7AdOBy2BJAnMNCpVETNkzmgJoHM3YnOPisY2qmU8RMnWuez:UEVRnMNCQZkLJoHyYeZqmU83uez
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-