General

  • Target
    ghost.bot.apk.v13.apk
  • Size 12.5MB
  • Sample260907-pterfavwaz
  • SHA256 8524c04a63ffb797e378aae715689c21d530711136ce3f0cbdd4f65ebd8c1216
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • ghost.bot.apk.v13.apk
    .apk 12.5MB

ghost.bot.apk.v13.apk

  • SHA256 8524c04a63ffb797e378aae715689c21d530711136ce3f0cbdd4f65ebd8c1216
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
a990befe360bae9b7540b185ba4d98ab5940e03d8a93fb5b2324c179dc5254f7
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
com.ghostbotbeta

Android Permissions

ghost.bot.apk.v13.apk

Permissions

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW