General

  • Target

    e77cb0aa9a624cf66f83a8832af3b12dc9536a4ad24ed30bd194c7723bd3d6cb.bin

  • Size

    3.9MB

  • MD5

    8b83ff50b4b15eefe846ec24e750091c

  • SHA1

    fe59eb92b1a27f7a7a64f6d319e38e5ef8b596d5

  • SHA256

    e77cb0aa9a624cf66f83a8832af3b12dc9536a4ad24ed30bd194c7723bd3d6cb

  • SHA512

    d1fa9aa27d2209bc42967c0dd669d8f651bc8d7ba5285bd090536f7da9e320d73297a36ba2acf4e8da227f09e226c07348d9337357d0d2accedafa3fb3b179e2

  • SSDEEP

    49152:Y3gHkefQN3R/bq6ZqOO2zuH7k4gX1qw/B4qNby02RxFgBML+t9g1/ynPDWFQi9kb:sgHfINBlZqGzw7kFFKJgiLG98yPDG0

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/zamukosaremopas

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • e77cb0aa9a624cf66f83a8832af3b12dc9536a4ad24ed30bd194c7723bd3d6cb.bin
    .apk android

    com.millikan.rosel

    com.millikan.rosel.poltinnik


Android Permissions

e77cb0aa9a624cf66f83a8832af3b12dc9536a4ad24ed30bd194c7723bd3d6cb.bin

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

com.millikan.rosel.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION