General

  • Target
    760f0e6f9c502d62bb64a5f568257521aa7bfe50ccf8c10dc287b35c8cf07d8f.bin
  • Size 1.6MB
  • Sample241114-1zh7laxmdm
  • SHA256 760f0e6f9c502d62bb64a5f568257521aa7bfe50ccf8c10dc287b35c8cf07d8f
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • errorfather

C2
  • https://api.telegram.org/bot7779906180:AAE3uTyuoDX0YpV1DBJyz5zgwvvVg-up4xo/sendMessage?chat_id=5915822121&text=

Targets

    • Target
      760f0e6f9c502d62bb64a5f568257521aa7bfe50ccf8c10dc287b35c8cf07d8f.bin
    • Size 1.6MB
    • SHA256 760f0e6f9c502d62bb64a5f568257521aa7bfe50ccf8c10dc287b35c8cf07d8f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    • Attempts to obfuscate APK file format

      Applies obfuscation techniques to the APK format in order to hinder analysis

    • Declares broadcast receivers with permission to handle system events

    • Declares services with permission to bind to the system

    • Requests dangerous framework permissions

MITRE ATT&CK Mobile v15

Tasks