General

  • Target

    6e14eae9240c8b2bf57518da4df1554eed25c78f40bf9ba3ab855dc298b4aede.bin

  • Size

    4.5MB

  • MD5

    13e74cc589c17226fae45d8f54cca7f6

  • SHA1

    c1476fbbfab443a501fbc2dfd83b94ed78ac9966

  • SHA256

    6e14eae9240c8b2bf57518da4df1554eed25c78f40bf9ba3ab855dc298b4aede

  • SHA512

    4240ad7306e98b3af711e4ea7c765606eaf3809c93a4b02b724ca6193f7c8ac96ab7a82dc0616f58ece08835d123cfba95dae93aba0938f31498ec4957941069

  • SSDEEP

    98304:Khe1xANJ0nWPrlkoSUoJ2t75IYpHELTkpmWJoRitc6tO3O6u2E2KzmMg:LWRCCIYefkNJoRMc6MXE2KzmMg

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/mazokoveraser

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 6e14eae9240c8b2bf57518da4df1554eed25c78f40bf9ba3ab855dc298b4aede.bin
    .apk android

    com.inwood.monophase

    com.inwood.monophase.HCM


  • up.apk
    .apk android

    com.soonspeeding.barnaba

    com.soonspeeding.barnaba.inodorous


Android Permissions

6e14eae9240c8b2bf57518da4df1554eed25c78f40bf9ba3ab855dc298b4aede.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES