General

  • Target

    745d7321f28e3634f7e2caf4c092dd68b10d51ea9bf7926ce0609cbb2b9fa226.bin

  • Size

    4.6MB

  • Sample

    240807-1wq32aybnh

  • MD5

    d70fb52d59d9495940c47c5c5ca47e5a

  • SHA1

    77b07bbf9c9846161ff76040d2df1f06a7fd5b69

  • SHA256

    745d7321f28e3634f7e2caf4c092dd68b10d51ea9bf7926ce0609cbb2b9fa226

  • SHA512

    54116616d10278360b2f27a6199f153a4896e074fc192f8c8b99995a00cfd793e1e4dc6ccf2f959761225d5a05067aa464da2767c613880239938bac2bf37bd7

  • SSDEEP

    98304:UWhfSsJF1j1PsQWYzBA/1esrVIXQ68RW8mblu:1fFHh51A/QoWfblu

Malware Config

Extracted

Family

godfather

C2

https://t.me/zamukosaremopas

Targets

    • Target

      745d7321f28e3634f7e2caf4c092dd68b10d51ea9bf7926ce0609cbb2b9fa226.bin

    • Size

      4.6MB

    • MD5

      d70fb52d59d9495940c47c5c5ca47e5a

    • SHA1

      77b07bbf9c9846161ff76040d2df1f06a7fd5b69

    • SHA256

      745d7321f28e3634f7e2caf4c092dd68b10d51ea9bf7926ce0609cbb2b9fa226

    • SHA512

      54116616d10278360b2f27a6199f153a4896e074fc192f8c8b99995a00cfd793e1e4dc6ccf2f959761225d5a05067aa464da2767c613880239938bac2bf37bd7

    • SSDEEP

      98304:UWhfSsJF1j1PsQWYzBA/1esrVIXQ68RW8mblu:1fFHh51A/QoWfblu

    Score
    4/10
    • Target

      up.apk

    • Size

      3.9MB

    • MD5

      a990292c7557abae3d78c27945d10e85

    • SHA1

      4f17fe329dd74adb655b04ffba6cd709b2c7d982

    • SHA256

      3490d163cafc8e2762feaa7c9325a684c2bc509ea88f0805862db59159010857

    • SHA512

      bae90131be8e36dfcac542e3955b2f95b42c93f679c118db9d8ad365390840270a99aeb8b4484033329a8d12acaade4a32bfc01ec25cd850116176517be708a6

    • SSDEEP

      49152:ehfbzsIoMs9qDXArwjjFIS54WSc3CcqL1P0X4vFzjBBIuPcsuR1EFmFQ/LnfwI0V:eZb5oMoxrwFISmAc7vVtPcn1MmwLfwqQ

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

MITRE ATT&CK Mobile v15

Tasks