General

  • Target

    6fccf43370d620708259e3dd5046bad4b40f0711a1709f37f01fac66338e03c4.bin

  • Size

    3.9MB

  • MD5

    fb4c92934dbb3c8b06893a391cfcc593

  • SHA1

    ee4aef0276ca2060c316a51e284bccfdcd0236fa

  • SHA256

    6fccf43370d620708259e3dd5046bad4b40f0711a1709f37f01fac66338e03c4

  • SHA512

    8be46c9bb5787d068a653aaa901794a54e0b99a72dcd3153fc093475bde4f8e6b3b6acf91929af6265c8975c3f83d6509e4b6dc36490c2492b5c45e372c9d540

  • SSDEEP

    98304:b4rXoGtpHajJeWisENxYO00wZ/Z4lNWmu4n:a3yeWixxY/PZ424n

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/napikozaremossod

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 6fccf43370d620708259e3dd5046bad4b40f0711a1709f37f01fac66338e03c4.bin
    .apk android

    com.hobits.euphorias

    com.hobits.euphorias.unfascinating


Android Permissions

6fccf43370d620708259e3dd5046bad4b40f0711a1709f37f01fac66338e03c4.bin

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

com.hobits.euphorias.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION