General
-
Target
4004500e143847b9f0c8b222fbed940e9a43f0d05cee576f93802989a6768a45.bin
-
Size
3.9MB
-
Sample
240905-1xbpqs1fra
-
MD5
06e4a056bd181f6628b796b892fddf62
-
SHA1
265a54af0ce2f0715a85ef68a63fd2d94b23954f
-
SHA256
4004500e143847b9f0c8b222fbed940e9a43f0d05cee576f93802989a6768a45
-
SHA512
2a69b5a89da020614fccb0fd1a2aecc40ee752920b0e23db127658f59a93ec72405f8ed3250137b77a534594a47598f1fa795fe4e12ba7c0a4c08e21633e7430
-
SSDEEP
98304:VF3Y820pr6YumkGImcXx88GpBnNaJrDZOEfIJ+MOQjTw2dp:L3HXF+mkGGXx88aBNuDZOEfIJCQ42dp
Behavioral task
behavioral1
Sample
4004500e143847b9f0c8b222fbed940e9a43f0d05cee576f93802989a6768a45.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
4004500e143847b9f0c8b222fbed940e9a43f0d05cee576f93802989a6768a45.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
4004500e143847b9f0c8b222fbed940e9a43f0d05cee576f93802989a6768a45.apk
Resource
android-x64-arm64-20240910-en
Malware Config
Extracted
godfather
https://t.me/yazmozaramekos
Targets
-
-
Target
4004500e143847b9f0c8b222fbed940e9a43f0d05cee576f93802989a6768a45.bin
-
Size
3.9MB
-
MD5
06e4a056bd181f6628b796b892fddf62
-
SHA1
265a54af0ce2f0715a85ef68a63fd2d94b23954f
-
SHA256
4004500e143847b9f0c8b222fbed940e9a43f0d05cee576f93802989a6768a45
-
SHA512
2a69b5a89da020614fccb0fd1a2aecc40ee752920b0e23db127658f59a93ec72405f8ed3250137b77a534594a47598f1fa795fe4e12ba7c0a4c08e21633e7430
-
SSDEEP
98304:VF3Y820pr6YumkGImcXx88GpBnNaJrDZOEfIJ+MOQjTw2dp:L3HXF+mkGGXx88aBNuDZOEfIJCQ42dp
Score6/10-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-