General

  • Target

    4793b7d02cd520c5cb3289d989cff3cb218dc78fa48619c168f6a8f8fdbc5972.bin

  • Size

    4.6MB

  • Sample

    240905-1xasfa1fqg

  • MD5

    29f8ab525b75cf601c9ec5cf6899deb4

  • SHA1

    e9cb9ff08c568427400e6fa88b8f55a2783a21de

  • SHA256

    4793b7d02cd520c5cb3289d989cff3cb218dc78fa48619c168f6a8f8fdbc5972

  • SHA512

    e250e3e94019e43d9c1e5cd3fc6de0c56cdf32df92915cc7e08c1fabe059139aa4b76a29fda6f631ad41e3174c66c710ac7fe32869be169f1363e273b19112c1

  • SSDEEP

    98304:a9adIljqoYWfKDBVijib92k1ZHNajQY3ZJ3:a4dWq/RDBViib9zZHN4BpJ3

Malware Config

Extracted

Family

godfather

C2

https://t.me/zamukosaremopas

Targets

    • Target

      4793b7d02cd520c5cb3289d989cff3cb218dc78fa48619c168f6a8f8fdbc5972.bin

    • Size

      4.6MB

    • MD5

      29f8ab525b75cf601c9ec5cf6899deb4

    • SHA1

      e9cb9ff08c568427400e6fa88b8f55a2783a21de

    • SHA256

      4793b7d02cd520c5cb3289d989cff3cb218dc78fa48619c168f6a8f8fdbc5972

    • SHA512

      e250e3e94019e43d9c1e5cd3fc6de0c56cdf32df92915cc7e08c1fabe059139aa4b76a29fda6f631ad41e3174c66c710ac7fe32869be169f1363e273b19112c1

    • SSDEEP

      98304:a9adIljqoYWfKDBVijib92k1ZHNajQY3ZJ3:a4dWq/RDBViib9zZHN4BpJ3

    Score
    4/10
    • Target

      up.apk

    • Size

      3.9MB

    • MD5

      5d19e9080e939e3fc537d8946039435e

    • SHA1

      20082174d5be5771780cec27972a2da24836ec2f

    • SHA256

      4aa9c7699d1e579261a8b2ae1989d7d43768b31687e8a5c3504df3112059d3cc

    • SHA512

      23551eb126fb93b60f1822e786e30084f04dd476872a92c05873e241927fafcc5f78086e640c92d16d4e91d269a32f387d6b316f910d4c5fc8198319042a6372

    • SSDEEP

      98304:SAnqjj9PZw6UX8mMBlOl3kuE8rinN28z1HYDv6wyoHvUwr:SzH9lxel3dBrinNX1HIvqoMwr

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

MITRE ATT&CK Mobile v15

Tasks