General
-
Target
5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6.bin
-
Size
3.7MB
-
Sample
240721-1xe26axajg
-
MD5
eb4b2f66ff6b63730718457098e28553
-
SHA1
db2d76eff8ac87e84b5c9550e7feaa45b084bd2d
-
SHA256
5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6
-
SHA512
1f1ac3269898a27e0ad0e83964c982774dc7d75998b6d3cc494d3e150ea651827882b72ecdc07b3cb07d4c396cba6538ff597517b6b247fa405f0c65abade498
-
SSDEEP
98304:xEJERzdoJhv8xT3haCi3yQ1LRShhEEgIk:xKEtyyh4DTSnPpk
Behavioral task
behavioral1
Sample
5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Extracted
godfather
https://t.me/pdfemonaserokim
Targets
-
-
Target
5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6.bin
-
Size
3.7MB
-
MD5
eb4b2f66ff6b63730718457098e28553
-
SHA1
db2d76eff8ac87e84b5c9550e7feaa45b084bd2d
-
SHA256
5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6
-
SHA512
1f1ac3269898a27e0ad0e83964c982774dc7d75998b6d3cc494d3e150ea651827882b72ecdc07b3cb07d4c396cba6538ff597517b6b247fa405f0c65abade498
-
SSDEEP
98304:xEJERzdoJhv8xT3haCi3yQ1LRShhEEgIk:xKEtyyh4DTSnPpk
Score6/10-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-