General
- Target e3a75d5f207eedf68bdb88c0d2182d9db8916ca6ae44d7a33963d4812ee0b71f.bin
- Size 1.6MB
- Sample241115-2yv1fathqa
- SHA256 e3a75d5f207eedf68bdb88c0d2182d9db8916ca6ae44d7a33963d4812ee0b71f
- MD5 14ed5a890f92da4254f3a172df3b6865
- SHA1 fa53ac01dd25d738630aa7263f0e198293b5165b
- SHA512 75e305bb5328099702fbb5f0e4475d47c6b75b2261a22f9b42179e4a42a7f2e4ff4eed0000bd6bbfa9dd145685c74fb450098d9f9944d97b51d8ec27645f2457
- SSDEEP 24576:8g2dj7TUQ7rRNLiu0Ck9j5X90PLOhlYN6qaBxEJ0jRilCbILQQ8WLaK:8g2pTN/To8L0YRJg0tLQrWLl
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
e3a75d5f207eedf68bdb88c0d2182d9db8916ca6ae44d7a33963d4812ee0b71f.apk
Resource
android-x86-arm-20240624-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
e3a75d5f207eedf68bdb88c0d2182d9db8916ca6ae44d7a33963d4812ee0b71f.apk
Resource
android-x64-20240624-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
e3a75d5f207eedf68bdb88c0d2182d9db8916ca6ae44d7a33963d4812ee0b71f.apk
Resource
android-x64-arm64-20240624-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
errorfather
C2
-
https://api.telegram.org/bot7779906180:AAE3uTyuoDX0YpV1DBJyz5zgwvvVg-up4xo/sendMessage?chat_id=5915822121&text=
Targets
-
- Target e3a75d5f207eedf68bdb88c0d2182d9db8916ca6ae44d7a33963d4812ee0b71f.bin
- Size 1.6MB
- SHA256 e3a75d5f207eedf68bdb88c0d2182d9db8916ca6ae44d7a33963d4812ee0b71f
- MD5 14ed5a890f92da4254f3a172df3b6865
- SHA1 fa53ac01dd25d738630aa7263f0e198293b5165b
- SHA512 75e305bb5328099702fbb5f0e4475d47c6b75b2261a22f9b42179e4a42a7f2e4ff4eed0000bd6bbfa9dd145685c74fb450098d9f9944d97b51d8ec27645f2457
- SSDEEP 24576:8g2dj7TUQ7rRNLiu0Ck9j5X90PLOhlYN6qaBxEJ0jRilCbILQQ8WLaK:8g2pTN/To8L0YRJg0tLQrWLl
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis
-
Declares broadcast receivers with permission to handle system events
-
Declares services with permission to bind to the system
-
Requests dangerous framework permissions