General

  • Target

    17cf95ba7c320703392d85ade1c11f2d8c2d8d0bd02ff68e062450f1341c9ac0.bin

  • Size

    4.7MB

  • MD5

    a345903a787e8baf81dd928dd792b82c

  • SHA1

    bb6b2eb4a372eed635b53e7e9ecc2db1c78b77b5

  • SHA256

    17cf95ba7c320703392d85ade1c11f2d8c2d8d0bd02ff68e062450f1341c9ac0

  • SHA512

    b3b888344e8ffa04be85e207f69ecb5b7656336f7d7469428630dcc3aed41086ea2023a41d7b623dc42734fde9fe1af41ec075e107f449d79a267b5e60bc9e5b

  • SSDEEP

    98304:17pGxZ9t0bZ0KIHWlM1nedIod7d9hLMcm/rnEwzCw4zH5:1FGxZspIHWOwy+NQcSrnEwC7zH5

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/intpravitokasero

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 17cf95ba7c320703392d85ade1c11f2d8c2d8d0bd02ff68e062450f1341c9ac0.bin
    .apk android

    com.verminicidal.sagittid

    com.verminicidal.sagittid.Arawakan


  • i.apk
    .apk android

    com.inferiorly.bottlemaking

    com.inferiorly.bottlemaking.restab


Android Permissions

17cf95ba7c320703392d85ade1c11f2d8c2d8d0bd02ff68e062450f1341c9ac0.bin

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES