General

  • Target

    dd7105c33a4f4e909a5101cac59858db9a609c82221b91c1d339ab950e7fa88d.bin

  • Size

    4.6MB

  • Sample

    241012-1y672ayajr

  • MD5

    3d2a9206f2a42b41f9b1e80171144c0a

  • SHA1

    783fed9e10a4e4f92c1d1d0f2eecea6d9db4976d

  • SHA256

    dd7105c33a4f4e909a5101cac59858db9a609c82221b91c1d339ab950e7fa88d

  • SHA512

    b1ae28875c1347d606ec0457214d6b4ae44ee0a5d2dfd06cca23a33db05298565ecb55013577e8119a472251b367b095503b07276c17af9432aa1575966f4328

  • SSDEEP

    98304:M1/fajemaMSTukdgCI6FcPY5KVhxhQivktk2hn4ltjbP2L4+:M1XajemdKZh+sKV7hQr1oxJ+

Malware Config

Extracted

Family

godfather

C2

https://t.me/uyamozakeposere

Targets

    • Target

      dd7105c33a4f4e909a5101cac59858db9a609c82221b91c1d339ab950e7fa88d.bin

    • Size

      4.6MB

    • MD5

      3d2a9206f2a42b41f9b1e80171144c0a

    • SHA1

      783fed9e10a4e4f92c1d1d0f2eecea6d9db4976d

    • SHA256

      dd7105c33a4f4e909a5101cac59858db9a609c82221b91c1d339ab950e7fa88d

    • SHA512

      b1ae28875c1347d606ec0457214d6b4ae44ee0a5d2dfd06cca23a33db05298565ecb55013577e8119a472251b367b095503b07276c17af9432aa1575966f4328

    • SSDEEP

      98304:M1/fajemaMSTukdgCI6FcPY5KVhxhQivktk2hn4ltjbP2L4+:M1XajemdKZh+sKV7hQr1oxJ+

    Score
    4/10
    • Target

      i.apk

    • Size

      3.9MB

    • MD5

      399d516ccc8046fcff9300397a441dc7

    • SHA1

      9c5340383eb9e5cfb400d4710dfb667bca25a1dc

    • SHA256

      06c2692c014d22ec9689c082b57b8905771d31679c354e3731b1503fcdd799d7

    • SHA512

      a795e971af49b74b6c0e71f6683faac3afdb91acbdb2c066a84c31412c93c10bcf2f528c7a13ba4d5ed94a2df2aa415767402fd822c17d78b39a793f05ddb247

    • SSDEEP

      98304:e3IhYC3gkvbsCa5Q93phhqJzhcavkts05koUM44eMT7M4z:vR/TwQC5hcN9qMIMM4z

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

MITRE ATT&CK Mobile v15

Tasks