General

  • Target
    d7bf462e4c7f210fac0cb47e9d80982fc1a2b9f8afd79ed4e45b0705e5a36760.bin
  • Size 3.9MB
  • Sample240729-113bvsxdqd
  • SHA256 d7bf462e4c7f210fac0cb47e9d80982fc1a2b9f8afd79ed4e45b0705e5a36760
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • godfather

C2
  • https://t.me/zamukosaremopas

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

File Explorer

  • d7bf462e4c7f210fac0cb47e9d80982fc1a2b9f8afd79ed4e45b0705e5a36760.bin
    .apk 3.9MB

d7bf462e4c7f210fac0cb47e9d80982fc1a2b9f8afd79ed4e45b0705e5a36760.bin

  • SHA256 d7bf462e4c7f210fac0cb47e9d80982fc1a2b9f8afd79ed4e45b0705e5a36760
  • MD5 SHA1 SHA512 SSDEEP
com.haftarot.jeanpierre

Android Permissions

d7bf462e4c7f210fac0cb47e9d80982fc1a2b9f8afd79ed4e45b0705e5a36760.bin

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

com.haftarot.jeanpierre.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION