Overview

overview

10

Static

static

10

594d6694bf...7d.apk

android-9-x86

8

594d6694bf...7d.apk

android-10-x64

7

594d6694bf...7d.apk

android-11-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d.bin
  • Size 3.7MB
  • Sample240601-2t1ecsac76
  • SHA256 594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
godfather

Malware Config

Extracted

Family

  • godfather

C2

  • https://t.me/intpravitokasero

Signatures

  • Godfather family
    godfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

File Explorer

  • 594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d.bin
    .apk 3.7MB

594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d.bin

  • SHA256 594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d
  • MD5 SHA1 SHA512 SSDEEP
android
com.backstay.miscommunicate

Android Permissions

594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d.bin

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

com.backstay.miscommunicate.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION