Overview

overview

10

Static

static

10

8de28a862a...1e.apk

android-9-x86

6

8de28a862a...1e.apk

android-10-x64

6

8de28a862a...1e.apk

android-11-x64

6

final-signed.apk

android-9-x86

7

final-signed.apk

android-13-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    8de28a862aacf7566acbcea299c237180cf399c6dfaac5659642261181c57c1e.bin
  • Size 2.9MB
  • Sample241107-12nj4azaml
  • SHA256 8de28a862aacf7566acbcea299c237180cf399c6dfaac5659642261181c57c1e
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
errorfather

Malware Config

Extracted

Family

  • errorfather

C2

  • https://api.telegram.org/bot7779906180:AAE3uTyuoDX0YpV1DBJyz5zgwvvVg-up4xo/sendMessage?chat_id=5915822121&text=

Signatures

  • Errorfather family
    errorfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 3 IoCs

File Explorer

  • 8de28a862aacf7566acbcea299c237180cf399c6dfaac5659642261181c57c1e.bin
    .apk 2.9MB
  • final-signed.apk
    .apk 2.6MB

8de28a862aacf7566acbcea299c237180cf399c6dfaac5659642261181c57c1e.bin

  • SHA256 8de28a862aacf7566acbcea299c237180cf399c6dfaac5659642261181c57c1e
  • MD5 SHA1 SHA512 SSDEEP
android
citrus.leotard.subtitle.parsnip

Android Permissions

8de28a862aacf7566acbcea299c237180cf399c6dfaac5659642261181c57c1e.bin

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES