General
-
Target
78c92d4e57107c35446e337bba94eb25f5d4f0c9aae80910954e401379db537a.bin
-
Size
4.4MB
-
Sample
240730-1ybq5a1fpq
-
MD5
a462db5bb9de189c6d71fbaf69e1ff93
-
SHA1
b793ecdf66d898f63c83ae38125f672f430e29dc
-
SHA256
78c92d4e57107c35446e337bba94eb25f5d4f0c9aae80910954e401379db537a
-
SHA512
10f5c414acbfb823a80b5ecb56f6bddae90684c2ad4712fdec68974af8fac700cf4b12c75b20c6faa9d82ca1e8c4d2d6bb6953b7b247f3c0bffe9bb97970cc3b
-
SSDEEP
98304:x/SRfBhNafKm+5mpwozjk4prqwfVH3GpR8Uw12D8M+:x/Sz/afP1zA49hh3GP/+
Behavioral task
behavioral1
Sample
78c92d4e57107c35446e337bba94eb25f5d4f0c9aae80910954e401379db537a.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
78c92d4e57107c35446e337bba94eb25f5d4f0c9aae80910954e401379db537a.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
78c92d4e57107c35446e337bba94eb25f5d4f0c9aae80910954e401379db537a.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
up.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral5
Sample
up.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral6
Sample
up.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Extracted
godfather
https://t.me/insgaramerbosake
Targets
-
-
Target
78c92d4e57107c35446e337bba94eb25f5d4f0c9aae80910954e401379db537a.bin
-
Size
4.4MB
-
MD5
a462db5bb9de189c6d71fbaf69e1ff93
-
SHA1
b793ecdf66d898f63c83ae38125f672f430e29dc
-
SHA256
78c92d4e57107c35446e337bba94eb25f5d4f0c9aae80910954e401379db537a
-
SHA512
10f5c414acbfb823a80b5ecb56f6bddae90684c2ad4712fdec68974af8fac700cf4b12c75b20c6faa9d82ca1e8c4d2d6bb6953b7b247f3c0bffe9bb97970cc3b
-
SSDEEP
98304:x/SRfBhNafKm+5mpwozjk4prqwfVH3GpR8Uw12D8M+:x/Sz/afP1zA49hh3GP/+
Score4/10 -
-
-
Target
up.apk
-
Size
3.7MB
-
MD5
19ce5da36487d85e6024f71e02487faf
-
SHA1
954106b4f247e87498aa20cddbdff8d4c79f938c
-
SHA256
f95300ca1c3c79807260a3c87864301b133b397ed3cf401001513a296b9b31b8
-
SHA512
e3abd39246ce00216944a94832ea270185dc696a5369bfd430b323a9125ad9d3c1b25a8ce7408220144555fe9264522623165df041ecad00680ed961ab495ddf
-
SSDEEP
98304:U1oU4Q58Q47RKooZCc30MNL0SMk/rT6Y+dAHO7lz:UIgEMZldrOYY7lz
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-