General
-
Target
4793b7d02cd520c5cb3289d989cff3cb218dc78fa48619c168f6a8f8fdbc5972.bin
-
Size
4.6MB
-
Sample
240905-1xasfa1fqg
-
MD5
29f8ab525b75cf601c9ec5cf6899deb4
-
SHA1
e9cb9ff08c568427400e6fa88b8f55a2783a21de
-
SHA256
4793b7d02cd520c5cb3289d989cff3cb218dc78fa48619c168f6a8f8fdbc5972
-
SHA512
e250e3e94019e43d9c1e5cd3fc6de0c56cdf32df92915cc7e08c1fabe059139aa4b76a29fda6f631ad41e3174c66c710ac7fe32869be169f1363e273b19112c1
-
SSDEEP
98304:a9adIljqoYWfKDBVijib92k1ZHNajQY3ZJ3:a4dWq/RDBViib9zZHN4BpJ3
Behavioral task
behavioral1
Sample
4793b7d02cd520c5cb3289d989cff3cb218dc78fa48619c168f6a8f8fdbc5972.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
4793b7d02cd520c5cb3289d989cff3cb218dc78fa48619c168f6a8f8fdbc5972.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
4793b7d02cd520c5cb3289d989cff3cb218dc78fa48619c168f6a8f8fdbc5972.apk
Resource
android-x64-arm64-20240910-en
Behavioral task
behavioral4
Sample
up.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral5
Sample
up.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral6
Sample
up.apk
Resource
android-x64-arm64-20240910-en
Malware Config
Extracted
godfather
https://t.me/zamukosaremopas
Targets
-
-
Target
4793b7d02cd520c5cb3289d989cff3cb218dc78fa48619c168f6a8f8fdbc5972.bin
-
Size
4.6MB
-
MD5
29f8ab525b75cf601c9ec5cf6899deb4
-
SHA1
e9cb9ff08c568427400e6fa88b8f55a2783a21de
-
SHA256
4793b7d02cd520c5cb3289d989cff3cb218dc78fa48619c168f6a8f8fdbc5972
-
SHA512
e250e3e94019e43d9c1e5cd3fc6de0c56cdf32df92915cc7e08c1fabe059139aa4b76a29fda6f631ad41e3174c66c710ac7fe32869be169f1363e273b19112c1
-
SSDEEP
98304:a9adIljqoYWfKDBVijib92k1ZHNajQY3ZJ3:a4dWq/RDBViib9zZHN4BpJ3
Score4/10 -
-
-
Target
up.apk
-
Size
3.9MB
-
MD5
5d19e9080e939e3fc537d8946039435e
-
SHA1
20082174d5be5771780cec27972a2da24836ec2f
-
SHA256
4aa9c7699d1e579261a8b2ae1989d7d43768b31687e8a5c3504df3112059d3cc
-
SHA512
23551eb126fb93b60f1822e786e30084f04dd476872a92c05873e241927fafcc5f78086e640c92d16d4e91d269a32f387d6b316f910d4c5fc8198319042a6372
-
SSDEEP
98304:SAnqjj9PZw6UX8mMBlOl3kuE8rinN28z1HYDv6wyoHvUwr:SzH9lxel3dBrinNX1HIvqoMwr
Score6/10-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-