General

  • Target
    dfe500aeab6a83c17a8e89b7a1c45465eb315038e14448df7e5d56cc07b45c01.bin
  • Size 1.6MB
  • Sample241114-1w7e1stfjn
  • SHA256 dfe500aeab6a83c17a8e89b7a1c45465eb315038e14448df7e5d56cc07b45c01
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • errorfather

C2
  • https://api.telegram.org/bot7779906180:AAE3uTyuoDX0YpV1DBJyz5zgwvvVg-up4xo/sendMessage?chat_id=5915822121&text=

Targets

    • Target
      dfe500aeab6a83c17a8e89b7a1c45465eb315038e14448df7e5d56cc07b45c01.bin
    • Size 1.6MB
    • SHA256 dfe500aeab6a83c17a8e89b7a1c45465eb315038e14448df7e5d56cc07b45c01
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    • Attempts to obfuscate APK file format

      Applies obfuscation techniques to the APK format in order to hinder analysis

    • Declares broadcast receivers with permission to handle system events

    • Declares services with permission to bind to the system

    • Requests dangerous framework permissions

MITRE ATT&CK Mobile v15

Tasks