Overview

overview

10

Static

static

10

d40157b4fa...c3.apk

android-9-x86

d40157b4fa...c3.apk

android-10-x64

d40157b4fa...c3.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d40157b4fa0cf4298a78ae63d9a38612b47822df2f09361542d26e60f3847cc3.bin

  • Size

    3.7MB

  • MD5

    86a5cbdeee8422363efd4cafa75a57ec

  • SHA1

    602bd5bdb2003b4e113127fc7287ab3d3d04f1ec

  • SHA256

    d40157b4fa0cf4298a78ae63d9a38612b47822df2f09361542d26e60f3847cc3

  • SHA512

    22f41b0780f8fd83c89bb6d5a64527645a11895084c989215079a9ab017a7d85e338b452fb4efc9eddf252f0dfab190147fbf2582311873c151bcbdbf0d7a587

  • SSDEEP

    98304:fvX5qE9Oz+t1SOv5T7IophgU6Yo9n5Y9a134FO41E:n58+tsOv5HIsZ6Yo95Y0+E41E

Score
10/10
godfather

Malware Config

Extracted

Family

godfather

C2

https://t.me/intpravitokasero

Signatures

  • Godfather family
    godfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • d40157b4fa0cf4298a78ae63d9a38612b47822df2f09361542d26e60f3847cc3.bin
    .apk android

    com.pseudopatriotically.creophagist

    com.pseudopatriotically.creophagist.metrotherapist


Android Permissions

d40157b4fa0cf4298a78ae63d9a38612b47822df2f09361542d26e60f3847cc3.bin

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

com.pseudopatriotically.creophagist.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION