Overview

overview

10

Static

static

10

320962fdfa...a7.apk

android-9-x86

8

320962fdfa...a7.apk

android-10-x64

8

320962fdfa...a7.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    320962fdfaf126f942e173d8e3e7aa6c5da3577fa538c16796bd10e8166fa5a7.bin

  • Size

    3.9MB

  • MD5

    9f13cf568be897169486642fb1580013

  • SHA1

    d3702031233d6c442bbacb5c1bd43eca6e02517e

  • SHA256

    320962fdfaf126f942e173d8e3e7aa6c5da3577fa538c16796bd10e8166fa5a7

  • SHA512

    124070450df268f5871835f0cd0a63dcd48453871a7365446621ec0959f1f8a2eb6196a683ef3085234d108191cfa6e8fc0ab9949b117ab9f7ce23e05564b8ea

  • SSDEEP

    98304:ZpHsoushcDd/xTNAumRbLzHtq3xd5+HarQAFdeU4pQlJKqKgzRos:Zp/u7/AumbnN8N+HarX4pQegzJ

Score
10/10
godfather

Malware Config

Extracted

Family

godfather

C2

https://t.me/bavazarikopsared

Signatures

  • Godfather family
    godfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 320962fdfaf126f942e173d8e3e7aa6c5da3577fa538c16796bd10e8166fa5a7.bin
    .apk android

    com.wrack.renounceable

    com.wrack.renounceable.tinwoman


Android Permissions

320962fdfaf126f942e173d8e3e7aa6c5da3577fa538c16796bd10e8166fa5a7.bin

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

com.wrack.renounceable.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION