General

  • Target

    4aa9c7699d1e579261a8b2ae1989d7d43768b31687e8a5c3504df3112059d3cc.bin

  • Size

    3.9MB

  • MD5

    5d19e9080e939e3fc537d8946039435e

  • SHA1

    20082174d5be5771780cec27972a2da24836ec2f

  • SHA256

    4aa9c7699d1e579261a8b2ae1989d7d43768b31687e8a5c3504df3112059d3cc

  • SHA512

    23551eb126fb93b60f1822e786e30084f04dd476872a92c05873e241927fafcc5f78086e640c92d16d4e91d269a32f387d6b316f910d4c5fc8198319042a6372

  • SSDEEP

    98304:SAnqjj9PZw6UX8mMBlOl3kuE8rinN28z1HYDv6wyoHvUwr:SzH9lxel3dBrinNX1HIvqoMwr

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/zamukosaremopas

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 4aa9c7699d1e579261a8b2ae1989d7d43768b31687e8a5c3504df3112059d3cc.bin
    .apk android

    com.estate.vertebrates

    com.estate.vertebrates.dodecylene


Android Permissions

4aa9c7699d1e579261a8b2ae1989d7d43768b31687e8a5c3504df3112059d3cc.bin

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

com.estate.vertebrates.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION