General

  • Target

    3897f7cbe772a911009bc8d27117a6577b8905649b10f84552c2173364ee4f91.bin

  • Size

    4.4MB

  • Sample

    240726-11r6ws1dje

  • MD5

    f5237faa629d0205892fc7ddc8d72fe0

  • SHA1

    d3d333684274bbcac70274e320344d65e59c88d0

  • SHA256

    3897f7cbe772a911009bc8d27117a6577b8905649b10f84552c2173364ee4f91

  • SHA512

    9451f8e1d3a246d2627c3270b2c02ac753970ebd93c9895ab4e059ebd3d584e9708130b6c4179211ea0c3560087425902518147bb1f7a6dba56c48a2a360f62e

  • SSDEEP

    98304:RnP05HwZrRo9v/4ienA3a0z59QZRTaF74Aj4YAC1T:t0wFRQQBAK0zm8FUAUW1T

Malware Config

Extracted

Family

godfather

C2

https://t.me/pdfemonaserokim

Targets

    • Target

      3897f7cbe772a911009bc8d27117a6577b8905649b10f84552c2173364ee4f91.bin

    • Size

      4.4MB

    • MD5

      f5237faa629d0205892fc7ddc8d72fe0

    • SHA1

      d3d333684274bbcac70274e320344d65e59c88d0

    • SHA256

      3897f7cbe772a911009bc8d27117a6577b8905649b10f84552c2173364ee4f91

    • SHA512

      9451f8e1d3a246d2627c3270b2c02ac753970ebd93c9895ab4e059ebd3d584e9708130b6c4179211ea0c3560087425902518147bb1f7a6dba56c48a2a360f62e

    • SSDEEP

      98304:RnP05HwZrRo9v/4ienA3a0z59QZRTaF74Aj4YAC1T:t0wFRQQBAK0zm8FUAUW1T

    Score
    4/10
    • Target

      up.apk

    • Size

      3.6MB

    • MD5

      bf715cdab30fca7c2d551a07219c54ba

    • SHA1

      969cee8e3cb30c083243edf7606f415dd675e861

    • SHA256

      289dffc1e9e8a23c41eca28ee87350464eeea076c653d709cab8a8cd0c980c58

    • SHA512

      8e84effe8947311aa1dc47ea8f0371b6a7fa32bc9548035527e8b1328746ec8554af48309bdaeaa74d9b95a7766e52bc08ccad489062c49eeb85625835f10cad

    • SSDEEP

      98304:vYJ3war8cXRHrCOvT/2iehAL0WHlRQjppymSNyk87lWI6:wOSRLCAT+JA4WHQOFQXxN6

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

MITRE ATT&CK Mobile v15

Tasks