General

  • Target

    03da5121242293bba4aeaf18c33d78cb40d9bf9924bfa30122daa26d3fa1e1a9.bin

  • Size

    4.6MB

  • MD5

    0a3f5d301279a4b301e98ecced8f1f09

  • SHA1

    c7faca859f8e27b6a908bf24f240c8677fa007ef

  • SHA256

    03da5121242293bba4aeaf18c33d78cb40d9bf9924bfa30122daa26d3fa1e1a9

  • SHA512

    89788647fa4b0ede5a6e5dd993f80bbef4d67ed322862262a9717aab2c69a8ba6247ae850153c38c29e213203dbb3f5c1fe915840b9cb2e408d5b0830c6959ca

  • SSDEEP

    98304:6K7MGSjZowJLLHGobRc8xnoiDILAOu/ncVf183XhE40eeRr:6K7MGSGwxLrLxnoiDi8ngCWfRr

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/tumonokasiperake

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 03da5121242293bba4aeaf18c33d78cb40d9bf9924bfa30122daa26d3fa1e1a9.bin
    .apk android

    com.anteoccupation.passionfrenzied

    com.anteoccupation.passionfrenzied.congests


  • i.apk
    .apk android

    com.supergoodness.ferrol

    com.supergoodness.ferrol.tridecilateral


Android Permissions

03da5121242293bba4aeaf18c33d78cb40d9bf9924bfa30122daa26d3fa1e1a9.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES