Resubmissions

13-03-2023 14:24

230313-rqp44scg71 10

General

  • Target

    a14aad1265eb307fbe71a3a5f6e688408ce153ff19838b3c5229f26ee3ece5dd.zip

  • Size

    8.6MB

  • MD5

    cfdb779d44d19470e288d7264018aa14

  • SHA1

    7cc71e8e34042a5d46f98e1e52d6e9a080b431d3

  • SHA256

    a14aad1265eb307fbe71a3a5f6e688408ce153ff19838b3c5229f26ee3ece5dd

  • SHA512

    f4f33e0403e3826c94aa14a30d05d19d0fc111cab5547c4cf7dda2e3c4e30df1ad8b74f1acb0d5671c8af5d4dc5bab292d4e93dbedc93bbe51bbee21111465d9

  • SSDEEP

    196608:eb3+T83O0ZszcDtPj2xZ2/sPsPp0gkXz0abePPlpp2:ebipApPj2isPsPjy0a2h2

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/nutkomterposekcons

Signatures

  • Godfather family
  • Requests dangerous framework permissions 5 IoCs

Files

  • a14aad1265eb307fbe71a3a5f6e688408ce153ff19838b3c5229f26ee3ece5dd.zip
    .apk android arch:arm arch:x64 arch:x86 arch:arm64

    com.thenextbiggeek.squidgamewallpaper

    com.thenextbiggeek.squidgamewallpaper.telomiticLaputan


Android Permissions

a14aad1265eb307fbe71a3a5f6e688408ce153ff19838b3c5229f26ee3ece5dd.zip

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_INTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.UPDATE_DEVICE_STATS

android.permission.MODIFY_PHONE_STATE

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.QUERY_ALL_PACKAGES