General
- Target Muzik indir.apk
- Size 4.6MB
- Sample250226-trytrawj13
- SHA256 c2bccfc8b3bdf2da5fb5c22055a9c4859256be7904933e9e0b92fa31fd0420d3
- MD5 c822246c2c42623e8f71243b5c0f3fd5
- SHA1 f471dba14c16afb89272c6d6134118f14789d074
- SHA512 6edfdacb29c37a926d6e14a3bc63680f0e3a1203bdaec6ea4ccb2022439f29c6fd85fa98a5aa669e307123a079658c40471d921f4093883d30fe092fb23c331c
- SSDEEP 98304:Y0RR6Ce30gUUhPo+ZhK4ReCP48OPguXnkv9U9P41vVlZtWqM:HaCekgUUhA6NJwFw9lZty
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Muzik indir.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
Muzik indir.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
Muzik indir.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
app.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral5
Sample
app.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral6
Sample
app.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Extracted
-
godfather
-
https://t.me/paperokomozase
Targets
-
- Target Muzik indir.apk
- Size 4.6MB
- SHA256 c2bccfc8b3bdf2da5fb5c22055a9c4859256be7904933e9e0b92fa31fd0420d3
- MD5 c822246c2c42623e8f71243b5c0f3fd5
- SHA1 f471dba14c16afb89272c6d6134118f14789d074
- SHA512 6edfdacb29c37a926d6e14a3bc63680f0e3a1203bdaec6ea4ccb2022439f29c6fd85fa98a5aa669e307123a079658c40471d921f4093883d30fe092fb23c331c
- SSDEEP 98304:Y0RR6Ce30gUUhPo+ZhK4ReCP48OPguXnkv9U9P41vVlZtWqM:HaCekgUUhA6NJwFw9lZty
- MD5 SHA1 SHA512 SSDEEP
Score4/10 -
- Target app.apk
- Size 3.9MB
- SHA256 81a95a11d5e2bcf94d600eaf3b4be998dc4c32ada538b8f5f2f9e5f737464b1f
- MD5 e3defec8f475e0dc064505373fd73833
- SHA1 15c4811da69105f5df7a243e489b9b3f997222a4
- SHA512 d3dff6e2c45d8f67b56bc94b8e38accfe4779e014d7fa79d5a02c61687731185bf6fd852a9bcfcfa4da876cab01b288d6a0c079ad3046c170150ac2efd6d54e0
- SSDEEP 98304:9zJOg0DRaMPFjpSCDy2Qlgab1Av/Ka6iDzpAe/Xzb:9zQg0DkMN/OjiRAIzb
- MD5 SHA1 SHA512 SSDEEP
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.