Resubmissions

14-06-2024 14:32

240614-rwm7psvbnc 10

13-02-2024 07:12

240213-h1mbjaca9w 10

22-01-2024 15:07

240122-shaj5ahdhm 8

General

  • Target

    Chrome.apk

  • Size

    4.8MB

  • MD5

    8a4c5cac12adc46ea3fc7dfb4c818642

  • SHA1

    e07c99492f803c23fafa3cb27dc49bf2183c67f3

  • SHA256

    20116083565a50f6b2db59011e9994e9a9f5db5994703d53233b8b202a5ad2f3

  • SHA512

    3eb8c79790755baf450443b4abf9bdead0bc1241296909606572b4094f154218ad2428368477f917c99df2c1b084c26d162806a4a7a3b4311add3477130d63ac

  • SSDEEP

    98304:9rr9leGyg2u+TxqR0+lBVtvHeL3BkH8dCq1Q8riv0Ua7zfroZHR6RHwvGHEf:9rr9lkg/iGTLHeLRkBq1Xr0ap5wvGO

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/famokorapisoram

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • Chrome.apk
    .apk android

    com.melting.mantaught

    com.melting.mantaught.weepie


Android Permissions

Chrome.apk

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

com.melting.mantaught.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION