General

  • Target

    eb64a1dfd9711261caa9e9b13ee7fbe63220f495e7bda8c58da3ef33fd0fe50b.bin

  • Size

    4.6MB

  • MD5

    a3e16e79c3a9004b223df98c086846a2

  • SHA1

    7fe32d336281a052ccb425af323043aa96aab817

  • SHA256

    eb64a1dfd9711261caa9e9b13ee7fbe63220f495e7bda8c58da3ef33fd0fe50b

  • SHA512

    87723130ef15f01a2ee49ae6bff6f7e050c9a0cfeb0346586084f87b63998f8f3921c776f55a7e793c81c352ef981983430100a83bc5aa4149a168c3ac70f74c

  • SSDEEP

    98304:BY1CLdYw51+O8rpha9K7VhLgpGkqAqoEQH:G1Ugtre9Kb8sk5H

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/zamukosaremopas

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • eb64a1dfd9711261caa9e9b13ee7fbe63220f495e7bda8c58da3ef33fd0fe50b.bin
    .apk android

    com.singlehandedness.strongheadedness

    com.singlehandedness.strongheadedness.cottise


  • up.apk
    .apk android

    com.millikan.rosel

    com.millikan.rosel.poltinnik


Android Permissions

eb64a1dfd9711261caa9e9b13ee7fbe63220f495e7bda8c58da3ef33fd0fe50b.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES