General

  • Target

    35e2ec4c6aa33d623ceb1dffaa85c44e163a8b11d794cee20925100e340e0b31.bin

  • Size

    4.6MB

  • MD5

    012aa26b381a7b2f4305604a027f1efc

  • SHA1

    fb2cbc93bd5650f8f7670b2f945d32b0e954556e

  • SHA256

    35e2ec4c6aa33d623ceb1dffaa85c44e163a8b11d794cee20925100e340e0b31

  • SHA512

    736b52d703b1d0eb33324adab9810d03aa19a73f5d5cb0a07d90140cb14b1cad300e7f75ae92ad0504fc801df9fb49e5687214e697f5e3ec9c761f0b03cbf43a

  • SSDEEP

    98304:QjpJ0PdiOQQWIkZ4ktcloXZV/HEokM+3I0AsMCloP7ahTzgOv:KpOPd/QQ/kZzz7EokvI0AtCC+ngOv

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/paperokomozase

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 35e2ec4c6aa33d623ceb1dffaa85c44e163a8b11d794cee20925100e340e0b31.bin
    .apk android

    com.morocota.mdnt

    com.morocota.mdnt.bluecollar


  • app.apk
    .apk android

    com.subdeltoid.armin

    com.subdeltoid.armin.monkeyboard


Android Permissions

35e2ec4c6aa33d623ceb1dffaa85c44e163a8b11d794cee20925100e340e0b31.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES