General

  • Target

    78c92d4e57107c35446e337bba94eb25f5d4f0c9aae80910954e401379db537a.bin

  • Size

    4.4MB

  • Sample

    240730-1ybq5a1fpq

  • MD5

    a462db5bb9de189c6d71fbaf69e1ff93

  • SHA1

    b793ecdf66d898f63c83ae38125f672f430e29dc

  • SHA256

    78c92d4e57107c35446e337bba94eb25f5d4f0c9aae80910954e401379db537a

  • SHA512

    10f5c414acbfb823a80b5ecb56f6bddae90684c2ad4712fdec68974af8fac700cf4b12c75b20c6faa9d82ca1e8c4d2d6bb6953b7b247f3c0bffe9bb97970cc3b

  • SSDEEP

    98304:x/SRfBhNafKm+5mpwozjk4prqwfVH3GpR8Uw12D8M+:x/Sz/afP1zA49hh3GP/+

Malware Config

Extracted

Family

godfather

C2

https://t.me/insgaramerbosake

Targets

    • Target

      78c92d4e57107c35446e337bba94eb25f5d4f0c9aae80910954e401379db537a.bin

    • Size

      4.4MB

    • MD5

      a462db5bb9de189c6d71fbaf69e1ff93

    • SHA1

      b793ecdf66d898f63c83ae38125f672f430e29dc

    • SHA256

      78c92d4e57107c35446e337bba94eb25f5d4f0c9aae80910954e401379db537a

    • SHA512

      10f5c414acbfb823a80b5ecb56f6bddae90684c2ad4712fdec68974af8fac700cf4b12c75b20c6faa9d82ca1e8c4d2d6bb6953b7b247f3c0bffe9bb97970cc3b

    • SSDEEP

      98304:x/SRfBhNafKm+5mpwozjk4prqwfVH3GpR8Uw12D8M+:x/Sz/afP1zA49hh3GP/+

    Score
    4/10
    • Target

      up.apk

    • Size

      3.7MB

    • MD5

      19ce5da36487d85e6024f71e02487faf

    • SHA1

      954106b4f247e87498aa20cddbdff8d4c79f938c

    • SHA256

      f95300ca1c3c79807260a3c87864301b133b397ed3cf401001513a296b9b31b8

    • SHA512

      e3abd39246ce00216944a94832ea270185dc696a5369bfd430b323a9125ad9d3c1b25a8ce7408220144555fe9264522623165df041ecad00680ed961ab495ddf

    • SSDEEP

      98304:U1oU4Q58Q47RKooZCc30MNL0SMk/rT6Y+dAHO7lz:UIgEMZldrOYY7lz

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

MITRE ATT&CK Mobile v15

Tasks