General
- Target dfe500aeab6a83c17a8e89b7a1c45465eb315038e14448df7e5d56cc07b45c01.bin
- Size 1.6MB
- Sample241114-1w7e1stfjn
- SHA256 dfe500aeab6a83c17a8e89b7a1c45465eb315038e14448df7e5d56cc07b45c01
- MD5 5755759b7c15c55617e73a8fd23c4b58
- SHA1 5b1fda717e525607a3a1d39686e486caebfe55d8
- SHA512 e8b971951e6f10b1237f81b119b5eb7497d794f80ca8a5e7a15354f83c0dd926b8edcfe2c895fd63679c4a51fd4952c47e221fd2eda289c0b263d3ce6ef6518e
- SSDEEP 49152:Og2tcSz9X/upO39Dmh8F9Qt/yeaP+GXd1SvG8C2c1i9C:b38tDm89QtyDmGN6xDc1iY
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
dfe500aeab6a83c17a8e89b7a1c45465eb315038e14448df7e5d56cc07b45c01.apk
Resource
android-x86-arm-20240624-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
dfe500aeab6a83c17a8e89b7a1c45465eb315038e14448df7e5d56cc07b45c01.apk
Resource
android-x64-20240910-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
dfe500aeab6a83c17a8e89b7a1c45465eb315038e14448df7e5d56cc07b45c01.apk
Resource
android-x64-arm64-20240624-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
errorfather
C2
-
https://api.telegram.org/bot7779906180:AAE3uTyuoDX0YpV1DBJyz5zgwvvVg-up4xo/sendMessage?chat_id=5915822121&text=
Targets
-
- Target dfe500aeab6a83c17a8e89b7a1c45465eb315038e14448df7e5d56cc07b45c01.bin
- Size 1.6MB
- SHA256 dfe500aeab6a83c17a8e89b7a1c45465eb315038e14448df7e5d56cc07b45c01
- MD5 5755759b7c15c55617e73a8fd23c4b58
- SHA1 5b1fda717e525607a3a1d39686e486caebfe55d8
- SHA512 e8b971951e6f10b1237f81b119b5eb7497d794f80ca8a5e7a15354f83c0dd926b8edcfe2c895fd63679c4a51fd4952c47e221fd2eda289c0b263d3ce6ef6518e
- SSDEEP 49152:Og2tcSz9X/upO39Dmh8F9Qt/yeaP+GXd1SvG8C2c1i9C:b38tDm89QtyDmGN6xDc1iY
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis
-
Declares broadcast receivers with permission to handle system events
-
Declares services with permission to bind to the system
-
Requests dangerous framework permissions