Resubmissions

22-11-2023 16:15

231122-tqbyladf25 10

06-02-2023 11:15

230206-ncz6dadf55 8

01-02-2023 07:34

230201-jd4sqsec2s 8

General

  • Target

    0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8_unpacked.zip

  • Size

    7.2MB

  • MD5

    ec9f857999b4fc3dd007fdb786b7a8d1

  • SHA1

    3fa48a36d22d848ad111b246ca94fa58088dbb7a

  • SHA256

    0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8

  • SHA512

    51d9965e08fa3f5cd8850df3f2dd8503c47ce9f3668b2ae90d3560cc16acd0d4d1b3bbed651d957bc41ea7595a527a00b9c600b3726faa6095af380019e3d1e0

  • SSDEEP

    98304:vDdInEpAOdLl2DfGjOmP34z09nmw3xAZMV8JiDQeZgUGdh0fr33dmh++0oEHi6Pz:5gE7tf3u09nmiOZmDid9h+CFZMXmwfXR

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/dobrynyanikitichsobre

Signatures

  • Godfather family
  • Requests dangerous framework permissions 8 IoCs

Files

  • 0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8_unpacked.zip
    .apk android

    com.rduzmauwns.jieliysagr

    com.rduzmauwns.jieliysagr.aJtzcrQbcpuSYfz


  • lib.arm64-v8a.godfat.so
  • lib.arm64-v8a.vncserver.so
  • lib.armeabi-v7a.godfat.so
  • lib.armeabi-v7a.vncserver.so
  • lib.x86.godfat.so
  • lib.x86.vncserver.so
  • lib.x86_64.godfat.so
  • lib.x86_64.vncserver.so

Android Permissions

0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8_unpacked.zip

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.BROADCAST_SMS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SMS

android.permission.PACKAGE_USAGE_STATS

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD