Resubmissions

05/11/2024, 17:52

241105-wf7cvsvhqa10

08/10/2024, 22:02

241008-1xzrka1ekq8

General

  • Target
    ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0.bin
  • Size 2.7MB
  • Sample241105-wf7cvsvhqa
  • SHA256 ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • errorfather

C2
  • https://api.telegram.org/bot7779906180:AAE3uTyuoDX0YpV1DBJyz5zgwvvVg-up4xo/sendMessage?chat_id=5915822121&text=

Signatures

  • Errorfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 3 IoCs

File Explorer

  • ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0.bin
    .apk 2.7MB
  • final-signed.apk
    .apk 2.4MB

ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0.bin

  • SHA256 ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0
  • MD5 SHA1 SHA512 SSDEEP
banter.afterglow.unfrosted.mascot

Android Permissions

ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0.bin

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES