General

  • Target

    7b77dfd02850aaf5d9c978dd531cd35f720a92a83376e8d58cffcde26dfbcfb1.bin

  • Size

    4.6MB

  • MD5

    0f10b0160f40b4e82a88eb5057fa0298

  • SHA1

    69329894d9d4a2ba5a22cc718fccd5f0485e6ce9

  • SHA256

    7b77dfd02850aaf5d9c978dd531cd35f720a92a83376e8d58cffcde26dfbcfb1

  • SHA512

    f9c66f495503da9282e7b33bd6555c59bd335ea5948c0b85e6dda43d8b1ec5b42b8ab1371e5530ac9cb8e6cbf96b769ee6996f38e31cf034557cf331834b4334

  • SSDEEP

    98304:qxIsLQWqxcq9sf/m7HODLqwAJYCfwyJdyRcJBj1ABr5CtoM7AZrfx:qxIsLfKs3m7H2yJYQwqyWnR25gofZrZ

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/bavazarikopsared

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 7b77dfd02850aaf5d9c978dd531cd35f720a92a83376e8d58cffcde26dfbcfb1.bin
    .apk android

    com.pistolwise.menthaceous

    com.pistolwise.menthaceous.dayblush


  • i.apk
    .apk android

    com.fillowite.outrows

    com.fillowite.outrows.auricles


Android Permissions

7b77dfd02850aaf5d9c978dd531cd35f720a92a83376e8d58cffcde26dfbcfb1.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES