General

  • Target

    3d51aedc7a2dbc0b8dbbfd448b59cf19ed8363ebab123d4ef58e3dfe095c5e3a.bin

  • Size

    4.6MB

  • MD5

    f3d68e61140ea6b16bdaa2454cb394c4

  • SHA1

    230b0580f0111a7885328c6b4a643d112e8d37a0

  • SHA256

    3d51aedc7a2dbc0b8dbbfd448b59cf19ed8363ebab123d4ef58e3dfe095c5e3a

  • SHA512

    5b431aa71d7caadf0b7cfebfd451a6238e768f7a64069752d1a5849674e4289d7552a0d9f32dedae6f4c36943276581127bdb69543f1a6864f7a489ad1830586

  • SSDEEP

    98304:wS/XUb3iQGCkY5NE+rycrCuS0cA2+kMcvA1PsZKq5yI:wScO7mE2+uDN2+kMcY1kR5yI

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/tumonokasiperake

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 3d51aedc7a2dbc0b8dbbfd448b59cf19ed8363ebab123d4ef58e3dfe095c5e3a.bin
    .apk android

    com.plagiostomatous.wac

    com.plagiostomatous.wac.mojarras


  • i.apk
    .apk android

    com.phosphated.bigler

    com.phosphated.bigler.iconoclastically


Android Permissions

3d51aedc7a2dbc0b8dbbfd448b59cf19ed8363ebab123d4ef58e3dfe095c5e3a.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES