General
-
Target
c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647.bin
-
Size
4.6MB
-
Sample
250123-11mamsxlgp
-
MD5
4abc56d891cf2946b33a89686b62dfff
-
SHA1
8650158b8f9e67624968283984ff3a830826acf5
-
SHA256
c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647
-
SHA512
c4b739af85c8cf7e0ea464a652df4daa5c51a6a7ddf959411785362e696254ee9c983dfb044acbb1aebc8329c4298b29be50533e8ce9003bc5bfba223f4f71ef
-
SSDEEP
98304:i+MH/WZx5eKxtIDazNhu4QmgNOYwXxYQMvEp7nx:s/WoKxTzfRgSXxY1sx
Behavioral task
behavioral1
Sample
c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
i.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral5
Sample
i.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral6
Sample
i.apk
Resource
android-x64-arm64-20240910-en
Malware Config
Extracted
godfather
https://t.me/uyamozakeposere
Targets
-
-
Target
c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647.bin
-
Size
4.6MB
-
MD5
4abc56d891cf2946b33a89686b62dfff
-
SHA1
8650158b8f9e67624968283984ff3a830826acf5
-
SHA256
c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647
-
SHA512
c4b739af85c8cf7e0ea464a652df4daa5c51a6a7ddf959411785362e696254ee9c983dfb044acbb1aebc8329c4298b29be50533e8ce9003bc5bfba223f4f71ef
-
SSDEEP
98304:i+MH/WZx5eKxtIDazNhu4QmgNOYwXxYQMvEp7nx:s/WoKxTzfRgSXxY1sx
Score4/10 -
-
-
Target
i.apk
-
Size
3.9MB
-
MD5
6ce8e6bafe3d51a058679137629ac19d
-
SHA1
31891442220a238bf51708fd370f681602beba1d
-
SHA256
4ba4f93bece0fe120af014a90d5546b22f3177d723076f368190af8f503e44d8
-
SHA512
043d9a09872bf936284c61da6d03808699e917f2a7e3c4e825ab7055e6cf7f3e03d38e468e9cfdd8594272705bed8c13d2074012bb3b06382d67c1fc9f5c6388
-
SSDEEP
98304:5AV29tyT2WcytslIhuYQwG34YS/lZ3qRPQYvVGGE:53ty6WfffCG/lxSQMGr
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-