General

  • Target

    4004500e143847b9f0c8b222fbed940e9a43f0d05cee576f93802989a6768a45.bin

  • Size

    3.9MB

  • MD5

    06e4a056bd181f6628b796b892fddf62

  • SHA1

    265a54af0ce2f0715a85ef68a63fd2d94b23954f

  • SHA256

    4004500e143847b9f0c8b222fbed940e9a43f0d05cee576f93802989a6768a45

  • SHA512

    2a69b5a89da020614fccb0fd1a2aecc40ee752920b0e23db127658f59a93ec72405f8ed3250137b77a534594a47598f1fa795fe4e12ba7c0a4c08e21633e7430

  • SSDEEP

    98304:VF3Y820pr6YumkGImcXx88GpBnNaJrDZOEfIJ+MOQjTw2dp:L3HXF+mkGGXx88aBNuDZOEfIJCQ42dp

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/yazmozaramekos

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 4004500e143847b9f0c8b222fbed940e9a43f0d05cee576f93802989a6768a45.bin
    .apk android

    com.inosculating.swithbert

    com.inosculating.swithbert.reverts


Android Permissions

4004500e143847b9f0c8b222fbed940e9a43f0d05cee576f93802989a6768a45.bin

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

com.inosculating.swithbert.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION