General

  • Target

    8c17a5b0b6e89d04fb97ce4ffa9760d9dc46d1451fb940d0a543c5b647918701.bin

  • Size

    4.6MB

  • Sample

    240905-1xf98a1frf

  • MD5

    a7cad33f5043c05b023fc4441473e8f0

  • SHA1

    c340dbac8bf6be3f3e9c45bf8e4a3cd6df5178bc

  • SHA256

    8c17a5b0b6e89d04fb97ce4ffa9760d9dc46d1451fb940d0a543c5b647918701

  • SHA512

    df07f2816a1130625af95d8935e63c157a83e1bd29faa2cf2417cdd9a805d84a9f36044038ab3e9b37280d226c535d635ca440b6c6da43d6416d7c07533cf0ff

  • SSDEEP

    98304:2inpaUrsqIckQha/IDMyXfeMSpB11Lrh584F60SiXHOgsUN0:hnpVr7Ic18IDtXfeM2BzPh584F60PXub

Malware Config

Extracted

Family

godfather

C2

https://t.me/yazmozaramekos

Targets

    • Target

      8c17a5b0b6e89d04fb97ce4ffa9760d9dc46d1451fb940d0a543c5b647918701.bin

    • Size

      4.6MB

    • MD5

      a7cad33f5043c05b023fc4441473e8f0

    • SHA1

      c340dbac8bf6be3f3e9c45bf8e4a3cd6df5178bc

    • SHA256

      8c17a5b0b6e89d04fb97ce4ffa9760d9dc46d1451fb940d0a543c5b647918701

    • SHA512

      df07f2816a1130625af95d8935e63c157a83e1bd29faa2cf2417cdd9a805d84a9f36044038ab3e9b37280d226c535d635ca440b6c6da43d6416d7c07533cf0ff

    • SSDEEP

      98304:2inpaUrsqIckQha/IDMyXfeMSpB11Lrh584F60SiXHOgsUN0:hnpVr7Ic18IDtXfeM2BzPh584F60PXub

    Score
    4/10
    • Target

      up.apk

    • Size

      3.9MB

    • MD5

      06e4a056bd181f6628b796b892fddf62

    • SHA1

      265a54af0ce2f0715a85ef68a63fd2d94b23954f

    • SHA256

      4004500e143847b9f0c8b222fbed940e9a43f0d05cee576f93802989a6768a45

    • SHA512

      2a69b5a89da020614fccb0fd1a2aecc40ee752920b0e23db127658f59a93ec72405f8ed3250137b77a534594a47598f1fa795fe4e12ba7c0a4c08e21633e7430

    • SSDEEP

      98304:VF3Y820pr6YumkGImcXx88GpBnNaJrDZOEfIJ+MOQjTw2dp:L3HXF+mkGGXx88aBNuDZOEfIJCQ42dp

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

MITRE ATT&CK Mobile v15

Tasks