General

  • Target

    c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647.bin

  • Size

    4.6MB

  • Sample

    250123-11mamsxlgp

  • MD5

    4abc56d891cf2946b33a89686b62dfff

  • SHA1

    8650158b8f9e67624968283984ff3a830826acf5

  • SHA256

    c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647

  • SHA512

    c4b739af85c8cf7e0ea464a652df4daa5c51a6a7ddf959411785362e696254ee9c983dfb044acbb1aebc8329c4298b29be50533e8ce9003bc5bfba223f4f71ef

  • SSDEEP

    98304:i+MH/WZx5eKxtIDazNhu4QmgNOYwXxYQMvEp7nx:s/WoKxTzfRgSXxY1sx

Malware Config

Extracted

Family

godfather

C2

https://t.me/uyamozakeposere

Targets

    • Target

      c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647.bin

    • Size

      4.6MB

    • MD5

      4abc56d891cf2946b33a89686b62dfff

    • SHA1

      8650158b8f9e67624968283984ff3a830826acf5

    • SHA256

      c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647

    • SHA512

      c4b739af85c8cf7e0ea464a652df4daa5c51a6a7ddf959411785362e696254ee9c983dfb044acbb1aebc8329c4298b29be50533e8ce9003bc5bfba223f4f71ef

    • SSDEEP

      98304:i+MH/WZx5eKxtIDazNhu4QmgNOYwXxYQMvEp7nx:s/WoKxTzfRgSXxY1sx

    Score
    4/10
    • Target

      i.apk

    • Size

      3.9MB

    • MD5

      6ce8e6bafe3d51a058679137629ac19d

    • SHA1

      31891442220a238bf51708fd370f681602beba1d

    • SHA256

      4ba4f93bece0fe120af014a90d5546b22f3177d723076f368190af8f503e44d8

    • SHA512

      043d9a09872bf936284c61da6d03808699e917f2a7e3c4e825ab7055e6cf7f3e03d38e468e9cfdd8594272705bed8c13d2074012bb3b06382d67c1fc9f5c6388

    • SSDEEP

      98304:5AV29tyT2WcytslIhuYQwG34YS/lZ3qRPQYvVGGE:53ty6WfffCG/lxSQMGr

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

MITRE ATT&CK Mobile v15

Tasks