General

  • Target

    MarMuzik.mp3indir.apk

  • Size

    4.4MB

  • MD5

    dfb59aa18633530f29a7fb27cb156187

  • SHA1

    ed6b9ce8013ca13678a77e1ce53100ddff392c92

  • SHA256

    6e0d01c4c547d235c247a6d0719f2aca2d4996ae78df4b671275914a9e3fd2d3

  • SHA512

    7dbd8ce3559b44ae5c7411036f4a9b70820040ea3b00eed89bd86037feff51172cd3ff5f7030195d286f3b003c44fc5e8bd80810fb8c1353e1699328c248b50d

  • SSDEEP

    98304:k4Y9fsk3NdWLn5JuhaSjYVMvbAukWlpbmdyEdGzfrX4oD:k6cNdWLn5AhBOMvbAtWllmdyQuD

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/falerominoterax

Signatures

  • Godfather family
  • Requests dangerous framework permissions 1 IoCs

Files

  • MarMuzik.mp3indir.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.simplemobiletools.smsmessenger

    com.simplemobiletools.smsmessenger.Feroniaunreelable


Android Permissions

MarMuzik.mp3indir.apk

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.DISABLE_KEYGUARD

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.QUERY_ALL_PACKAGES