General

  • Target

    e76318d5848be1d7876e6cb0afc7afdd10a984e15fc365c006bb87d07b86c825.bin

  • Size

    4.7MB

  • MD5

    27bb9dab192bc85db9c5e91718fc72b9

  • SHA1

    9fdef59b1ba67d8493d7e9619bd44b7fa8856490

  • SHA256

    e76318d5848be1d7876e6cb0afc7afdd10a984e15fc365c006bb87d07b86c825

  • SHA512

    dd72639178c917945a097ceebc91698c1854c296be4b1434051d9a2101f1504fd281d9805b1c1b7adbbec913f2876d56e02e2cb3efbbdfeee80e59f1fcd0bb6e

  • SSDEEP

    98304:tthZaF/p3HN10BSvjfcgtzgMV/iYgLv3prM/iv07vpHnyC+Q1oUyb3QBQ:zfaP3HISrUpPxC/h44oUogy

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/intpravitokasero

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • e76318d5848be1d7876e6cb0afc7afdd10a984e15fc365c006bb87d07b86c825.bin
    .apk android

    com.honorability.licko

    com.honorability.licko.wirelesses


  • i.apk
    .apk android

    com.tolstoyan.seismotherapy

    com.tolstoyan.seismotherapy.ringless


Android Permissions

e76318d5848be1d7876e6cb0afc7afdd10a984e15fc365c006bb87d07b86c825.bin

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES