General
-
Target
d813b0e354f510af79982f302a9ef6786b033a7cd50ffabcd12b59a5da893a58.bin
-
Size
4.6MB
-
Sample
250106-1ybfcs1rdr
-
MD5
f7a39f11e8ba1326a0a5fc5ccbc882d0
-
SHA1
48b509113b102f9af64f5972736109f04c6157cf
-
SHA256
d813b0e354f510af79982f302a9ef6786b033a7cd50ffabcd12b59a5da893a58
-
SHA512
dfbdd335d60875f9840aca53515a8686c876900e6be0a8922a3aacafb692c10ef9bc4ad3ef4a5d852fef32fcfcb1cbd4ee4736f831066ef73e05ae793342a945
-
SSDEEP
98304:PZgIeh5pe1N1gRHlsDuxAgDF5yR1nsRIGwk+9UR75iDyqVm9Ysn:PCIK5EH1VSxLBAPKuo7UD4YE
Behavioral task
behavioral1
Sample
d813b0e354f510af79982f302a9ef6786b033a7cd50ffabcd12b59a5da893a58.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
d813b0e354f510af79982f302a9ef6786b033a7cd50ffabcd12b59a5da893a58.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
d813b0e354f510af79982f302a9ef6786b033a7cd50ffabcd12b59a5da893a58.apk
Resource
android-x64-arm64-20240910-en
Behavioral task
behavioral4
Sample
app.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral5
Sample
app.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral6
Sample
app.apk
Resource
android-x64-arm64-20240910-en
Malware Config
Extracted
godfather
https://t.me/raposekosaramuz
Targets
-
-
Target
d813b0e354f510af79982f302a9ef6786b033a7cd50ffabcd12b59a5da893a58.bin
-
Size
4.6MB
-
MD5
f7a39f11e8ba1326a0a5fc5ccbc882d0
-
SHA1
48b509113b102f9af64f5972736109f04c6157cf
-
SHA256
d813b0e354f510af79982f302a9ef6786b033a7cd50ffabcd12b59a5da893a58
-
SHA512
dfbdd335d60875f9840aca53515a8686c876900e6be0a8922a3aacafb692c10ef9bc4ad3ef4a5d852fef32fcfcb1cbd4ee4736f831066ef73e05ae793342a945
-
SSDEEP
98304:PZgIeh5pe1N1gRHlsDuxAgDF5yR1nsRIGwk+9UR75iDyqVm9Ysn:PCIK5EH1VSxLBAPKuo7UD4YE
Score4/10 -
-
-
Target
app.apk
-
Size
3.9MB
-
MD5
ba55d21d1a168acfa2c461a10ee4f553
-
SHA1
a480b811d555a5dbdf18e47ee0cb5995cee1fda8
-
SHA256
a4090386638069b3b35fa5c94deda9348f6da26c33381e31c5ed3bc95fadc104
-
SHA512
ed7d6d5cfe2bef60e7a913348305559c584a24b32d869e6f4a7c4534bd69d1d0b3a38652f91f50b3bc8f1e39167e96f3cb38a6d566a96e6e3af974c59c483f99
-
SSDEEP
98304:HrMDRTHvWY8ZHS7tSx1RIRYaWLIJP9nMUkaNK3/gJNYM:DjdCAJMx9nMIUYJNF
Score6/10-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-