General

  • Target

    c0d42ce79a54343aabac5e737d42c621ecf06ffd94ac117d4bf9eecc4acc5aa0.bin

  • Size

    3.9MB

  • MD5

    98341d0629597b84ef1391856fb6ba8c

  • SHA1

    62ced21668e6f5ea68b945608f98627f209cad39

  • SHA256

    c0d42ce79a54343aabac5e737d42c621ecf06ffd94ac117d4bf9eecc4acc5aa0

  • SHA512

    67c345de64dd06521d36d76787ea131ca60c9fd283ce5aad68f4bd4a73799f92b00635adfecf7b32c92cb13defc99ed2e84befb27635e51b9e72e19f85ad375b

  • SSDEEP

    98304:pFMDOCLXKVHgTgoERjo4VGAFx/5jBXk/55meRVshFO+ibx:EaGKKLgvFLjZkhRVsWbx

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/napikozaremossod

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • c0d42ce79a54343aabac5e737d42c621ecf06ffd94ac117d4bf9eecc4acc5aa0.bin
    .apk android

    com.kilndried.mesenterical

    com.kilndried.mesenterical.roundblazing


Android Permissions

c0d42ce79a54343aabac5e737d42c621ecf06ffd94ac117d4bf9eecc4acc5aa0.bin

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

com.kilndried.mesenterical.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION