f898162fbf7655f6e0c64ab0b50e4c76d62d1e013687fa2d9302d2f68973cef7
- SHA256 f898162fbf7655f6e0c64ab0b50e4c76d62d1e013687fa2d9302d2f68973cef7
cosmos.scrubber.pupil
Resubmissions
14/09/2026, 20:09
260914-yxgvmst1gs1014/09/2026, 20:07
260914-yv3pbsgr5t1014/09/2026, 20:04
260914-ytbt8at1av1014/09/2026, 19:16
260914-xyx3kstwgz1014/09/2026, 15:19
260914-sqfq4sbd771014/09/2026, 10:24
260914-mflaysbj7v1014/09/2026, 10:20
260914-mdfyfsbj4z1014/09/2026, 10:18
260914-mb2r5sbj3t1016/08/2025, 01:23
250816-br2arstyfx10General
- Target f898162fbf7655f6e0c64ab0b50e4c76d62d1e013687fa2d9302d2f68973cef7
- Size 8.7MB
- Sample250816-br2arstyfx
- SHA256 f898162fbf7655f6e0c64ab0b50e4c76d62d1e013687fa2d9302d2f68973cef7
Score
10/10
Malware Config
Extracted
Family
-
errorfather
C2
-
https://api.telegram.org/bot7779906180:AAE3uTyuoDX0YpV1DBJyz5zgwvvVg-up4xo/sendMessage?chat_id=5915822121&text=
Signatures
- Errorfather family
- Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis
- Requests dangerous framework permissions 3 IoCs
File Explorer
-
f898162fbf7655f6e0c64ab0b50e4c76d62d1e013687fa2d9302d2f68973cef7
Android Permissions
f898162fbf7655f6e0c64ab0b50e4c76d62d1e013687fa2d9302d2f68973cef7
Permissions
android.permission.INTERNET
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.QUERY_ALL_PACKAGES