General
-
Target
745d7321f28e3634f7e2caf4c092dd68b10d51ea9bf7926ce0609cbb2b9fa226.bin
-
Size
4.6MB
-
Sample
240807-1wq32aybnh
-
MD5
d70fb52d59d9495940c47c5c5ca47e5a
-
SHA1
77b07bbf9c9846161ff76040d2df1f06a7fd5b69
-
SHA256
745d7321f28e3634f7e2caf4c092dd68b10d51ea9bf7926ce0609cbb2b9fa226
-
SHA512
54116616d10278360b2f27a6199f153a4896e074fc192f8c8b99995a00cfd793e1e4dc6ccf2f959761225d5a05067aa464da2767c613880239938bac2bf37bd7
-
SSDEEP
98304:UWhfSsJF1j1PsQWYzBA/1esrVIXQ68RW8mblu:1fFHh51A/QoWfblu
Behavioral task
behavioral1
Sample
745d7321f28e3634f7e2caf4c092dd68b10d51ea9bf7926ce0609cbb2b9fa226.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
745d7321f28e3634f7e2caf4c092dd68b10d51ea9bf7926ce0609cbb2b9fa226.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
745d7321f28e3634f7e2caf4c092dd68b10d51ea9bf7926ce0609cbb2b9fa226.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
up.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral5
Sample
up.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral6
Sample
up.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Extracted
godfather
https://t.me/zamukosaremopas
Targets
-
-
Target
745d7321f28e3634f7e2caf4c092dd68b10d51ea9bf7926ce0609cbb2b9fa226.bin
-
Size
4.6MB
-
MD5
d70fb52d59d9495940c47c5c5ca47e5a
-
SHA1
77b07bbf9c9846161ff76040d2df1f06a7fd5b69
-
SHA256
745d7321f28e3634f7e2caf4c092dd68b10d51ea9bf7926ce0609cbb2b9fa226
-
SHA512
54116616d10278360b2f27a6199f153a4896e074fc192f8c8b99995a00cfd793e1e4dc6ccf2f959761225d5a05067aa464da2767c613880239938bac2bf37bd7
-
SSDEEP
98304:UWhfSsJF1j1PsQWYzBA/1esrVIXQ68RW8mblu:1fFHh51A/QoWfblu
Score4/10 -
-
-
Target
up.apk
-
Size
3.9MB
-
MD5
a990292c7557abae3d78c27945d10e85
-
SHA1
4f17fe329dd74adb655b04ffba6cd709b2c7d982
-
SHA256
3490d163cafc8e2762feaa7c9325a684c2bc509ea88f0805862db59159010857
-
SHA512
bae90131be8e36dfcac542e3955b2f95b42c93f679c118db9d8ad365390840270a99aeb8b4484033329a8d12acaade4a32bfc01ec25cd850116176517be708a6
-
SSDEEP
49152:ehfbzsIoMs9qDXArwjjFIS54WSc3CcqL1P0X4vFzjBBIuPcsuR1EFmFQ/LnfwI0V:eZb5oMoxrwFISmAc7vVtPcn1MmwLfwqQ
Score6/10-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-