General
- Target 760f0e6f9c502d62bb64a5f568257521aa7bfe50ccf8c10dc287b35c8cf07d8f.bin
- Size 1.6MB
- Sample241114-1zh7laxmdm
- SHA256 760f0e6f9c502d62bb64a5f568257521aa7bfe50ccf8c10dc287b35c8cf07d8f
- MD5 83041233a8899101447880761ec856d5
- SHA1 f5116a906cc1f6b03b617fd2e3307fe13d56b21c
- SHA512 94241574f4d444c9294dfa25f4e380d0ab2146076a1b7b95a8c3c4efe70c85d98b8aa319d1abafbb56a9dbc72b6c8a273aec542382046bde23024958e755e961
- SSDEEP 49152:gg2QzB8vKy9aBAa+SxVa9H++wAH02i8Ce:xzSv3aLiH+3cJCe
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
760f0e6f9c502d62bb64a5f568257521aa7bfe50ccf8c10dc287b35c8cf07d8f.apk
Resource
android-x86-arm-20240624-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
760f0e6f9c502d62bb64a5f568257521aa7bfe50ccf8c10dc287b35c8cf07d8f.apk
Resource
android-x64-20240910-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
760f0e6f9c502d62bb64a5f568257521aa7bfe50ccf8c10dc287b35c8cf07d8f.apk
Resource
android-x64-arm64-20240624-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
errorfather
C2
-
https://api.telegram.org/bot7779906180:AAE3uTyuoDX0YpV1DBJyz5zgwvvVg-up4xo/sendMessage?chat_id=5915822121&text=
Targets
-
- Target 760f0e6f9c502d62bb64a5f568257521aa7bfe50ccf8c10dc287b35c8cf07d8f.bin
- Size 1.6MB
- SHA256 760f0e6f9c502d62bb64a5f568257521aa7bfe50ccf8c10dc287b35c8cf07d8f
- MD5 83041233a8899101447880761ec856d5
- SHA1 f5116a906cc1f6b03b617fd2e3307fe13d56b21c
- SHA512 94241574f4d444c9294dfa25f4e380d0ab2146076a1b7b95a8c3c4efe70c85d98b8aa319d1abafbb56a9dbc72b6c8a273aec542382046bde23024958e755e961
- SSDEEP 49152:gg2QzB8vKy9aBAa+SxVa9H++wAH02i8Ce:xzSv3aLiH+3cJCe
- MD5 SHA1 SHA512 SSDEEP
Score6/10Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis
Declares broadcast receivers with permission to handle system events
Declares services with permission to bind to the system
Requests dangerous framework permissions