General
-
Target
3897f7cbe772a911009bc8d27117a6577b8905649b10f84552c2173364ee4f91.bin
-
Size
4.4MB
-
Sample
240726-11r6ws1dje
-
MD5
f5237faa629d0205892fc7ddc8d72fe0
-
SHA1
d3d333684274bbcac70274e320344d65e59c88d0
-
SHA256
3897f7cbe772a911009bc8d27117a6577b8905649b10f84552c2173364ee4f91
-
SHA512
9451f8e1d3a246d2627c3270b2c02ac753970ebd93c9895ab4e059ebd3d584e9708130b6c4179211ea0c3560087425902518147bb1f7a6dba56c48a2a360f62e
-
SSDEEP
98304:RnP05HwZrRo9v/4ienA3a0z59QZRTaF74Aj4YAC1T:t0wFRQQBAK0zm8FUAUW1T
Behavioral task
behavioral1
Sample
3897f7cbe772a911009bc8d27117a6577b8905649b10f84552c2173364ee4f91.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
3897f7cbe772a911009bc8d27117a6577b8905649b10f84552c2173364ee4f91.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
3897f7cbe772a911009bc8d27117a6577b8905649b10f84552c2173364ee4f91.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
up.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral5
Sample
up.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral6
Sample
up.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Extracted
godfather
https://t.me/pdfemonaserokim
Targets
-
-
Target
3897f7cbe772a911009bc8d27117a6577b8905649b10f84552c2173364ee4f91.bin
-
Size
4.4MB
-
MD5
f5237faa629d0205892fc7ddc8d72fe0
-
SHA1
d3d333684274bbcac70274e320344d65e59c88d0
-
SHA256
3897f7cbe772a911009bc8d27117a6577b8905649b10f84552c2173364ee4f91
-
SHA512
9451f8e1d3a246d2627c3270b2c02ac753970ebd93c9895ab4e059ebd3d584e9708130b6c4179211ea0c3560087425902518147bb1f7a6dba56c48a2a360f62e
-
SSDEEP
98304:RnP05HwZrRo9v/4ienA3a0z59QZRTaF74Aj4YAC1T:t0wFRQQBAK0zm8FUAUW1T
Score4/10 -
-
-
Target
up.apk
-
Size
3.6MB
-
MD5
bf715cdab30fca7c2d551a07219c54ba
-
SHA1
969cee8e3cb30c083243edf7606f415dd675e861
-
SHA256
289dffc1e9e8a23c41eca28ee87350464eeea076c653d709cab8a8cd0c980c58
-
SHA512
8e84effe8947311aa1dc47ea8f0371b6a7fa32bc9548035527e8b1328746ec8554af48309bdaeaa74d9b95a7766e52bc08ccad489062c49eeb85625835f10cad
-
SSDEEP
98304:vYJ3war8cXRHrCOvT/2iehAL0WHlRQjppymSNyk87lWI6:wOSRLCAT+JA4WHQOFQXxN6
Score6/10-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-