Resubmissions

06-06-2023 13:19

230606-qk2ehsec9z 10

11-01-2023 09:41

230111-lntfvsff3y 8

General

  • Target

    b6249fa996cb4046bdab37bab5e3b4d43c79ea537f119040c3b3e138149897fd.apk

  • Size

    11.5MB

  • MD5

    7e061e87f9a4c27bfb69980980270720

  • SHA1

    34d37927b35f422e7c28055ea989ef6524a668ef

  • SHA256

    b6249fa996cb4046bdab37bab5e3b4d43c79ea537f119040c3b3e138149897fd

  • SHA512

    aa7fc96da1040e1c97c522bc23e2a84c7684813185289cde4ff57937b11b7866ad5ea5a87df19fe7dbd090b18efb1540146380f4e91fd2104e0cf15e0e5545fd

  • SSDEEP

    196608:HNQ+EyaHv2Dl1bQ6x49K6MoJzMHWjfd/7LbDRtUlCv1phj2oIK1Dfo:H4DHv2vme04HafVLDRKlCv1phj2FK1ro

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/rosesoldiermans

Signatures

  • Godfather family
  • Requests dangerous framework permissions 3 IoCs

Files

  • b6249fa996cb4046bdab37bab5e3b4d43c79ea537f119040c3b3e138149897fd.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.pdffiller.l2f

    com.pdffiller.l2f.outstripsperfectibilism


  • Roboto-Light.ttf
  • Roboto-Medium.ttf

Android Permissions

b6249fa996cb4046bdab37bab5e3b4d43c79ea537f119040c3b3e138149897fd.apk

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.DISABLE_KEYGUARD

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.UPDATE_DEVICE_STATS

android.permission.MODIFY_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.QUERY_ALL_PACKAGES