General

  • Target

    103f2a0a29c230f3cc3249e49dcf9dd9e98396bc90dff2629aca1c54d8ac51d7.bin

  • Size

    3.7MB

  • MD5

    21f1b0b33ff48b6c8b8f6b5e95b96fa9

  • SHA1

    0444c98c048c0de65adc2e920955d4bb99ae41e7

  • SHA256

    103f2a0a29c230f3cc3249e49dcf9dd9e98396bc90dff2629aca1c54d8ac51d7

  • SHA512

    0eed972fa8d2fe172ef6db7c28dd4e32b9ce1c5fcc2ced2627f03f436c7597c756c310a86f36a07f3c29fe1a264ff81236a77804ec002f01a6922a9beca1c189

  • SSDEEP

    98304:qAslPP7AdOBy2BJAnMNCpVETNkzmgJoHM3YnOPisY2qmU8RMnWuez:UEVRnMNCQZkLJoHyYeZqmU83uez

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/mazokoveraser

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 103f2a0a29c230f3cc3249e49dcf9dd9e98396bc90dff2629aca1c54d8ac51d7.bin
    .apk android

    com.soonspeeding.barnaba

    com.soonspeeding.barnaba.inodorous


Android Permissions

103f2a0a29c230f3cc3249e49dcf9dd9e98396bc90dff2629aca1c54d8ac51d7.bin

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

com.soonspeeding.barnaba.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION