General

  • Target
    96120d1868c5471d7f9728411f244f0cdbc0e279cdee6f6705f772661c1305c4.bin
  • Size 4.6MB
  • Sample240519-1zhaasce21
  • SHA256 96120d1868c5471d7f9728411f244f0cdbc0e279cdee6f6705f772661c1305c4
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • godfather

C2
  • https://t.me/napikozaremossod

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

File Explorer

  • 96120d1868c5471d7f9728411f244f0cdbc0e279cdee6f6705f772661c1305c4.bin
    .apk 4.6MB
  • i.apk
    .apk 3.9MB

96120d1868c5471d7f9728411f244f0cdbc0e279cdee6f6705f772661c1305c4.bin

  • SHA256 96120d1868c5471d7f9728411f244f0cdbc0e279cdee6f6705f772661c1305c4
  • MD5 SHA1 SHA512 SSDEEP
com.essay.existently

Android Permissions

96120d1868c5471d7f9728411f244f0cdbc0e279cdee6f6705f772661c1305c4.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES