errorfather | e3a75d5f207eedf68bdb88c0d2182d9db8916ca6ae44d7a33963d4812ee0b71f[.]bin

General

Target
e3a75d5f207eedf68bdb88c0d2182d9db8916ca6ae44d7a33963d4812ee0b71f.bin
Size 1.6MB
Sample241115-2yv1fathqa
SHA256 e3a75d5f207eedf68bdb88c0d2182d9db8916ca6ae44d7a33963d4812ee0b71f
MD5 14ed5a890f92da4254f3a172df3b6865
SHA1 fa53ac01dd25d738630aa7263f0e198293b5165b
SHA512 75e305bb5328099702fbb5f0e4475d47c6b75b2261a22f9b42179e4a42a7f2e4ff4eed0000bd6bbfa9dd145685c74fb450098d9f9944d97b51d8ec27645f2457
SSDEEP 24576:8g2dj7TUQ7rRNLiu0Ck9j5X90PLOhlYN6qaBxEJ0jRilCbILQQ8WLaK:8g2pTN/To8L0YRJg0tLQrWLl
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

errorfather

Family

C2

https://api.telegram.org/bot7779906180:AAE3uTyuoDX0YpV1DBJyz5zgwvvVg-up4xo/sendMessage?chat_id=5915822121&text=

Errorfather family
errorfather
Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

e3a75d5f207eedf68bdb88c0d2182d9db8916ca6ae44d7a33963d4812ee0b71f.bin

.apk 1.6MB

SHA256 e3a75d5f207eedf68bdb88c0d2182d9db8916ca6ae44d7a33963d4812ee0b71f
MD5 14ed5a890f92da4254f3a172df3b6865
SHA1 fa53ac01dd25d738630aa7263f0e198293b5165b
SHA512 75e305bb5328099702fbb5f0e4475d47c6b75b2261a22f9b42179e4a42a7f2e4ff4eed0000bd6bbfa9dd145685c74fb450098d9f9944d97b51d8ec27645f2457
SSDEEP 24576:8g2dj7TUQ7rRNLiu0Ck9j5X90PLOhlYN6qaBxEJ0jRilCbILQQ8WLaK:8g2pTN/To8L0YRJg0tLQrWLl
MD5 SHA1 SHA512 SSDEEP

android

cosmos.scrubber.pupil

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES