General

  • Target

    594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d.bin

  • Size

    3.7MB

  • MD5

    f8540764ac58575f150cc992ad241a5d

  • SHA1

    eccc50efe5dd4d494b572433a39efa08d8092482

  • SHA256

    594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d

  • SHA512

    1ac4e29275a3aa70990c26973333e36b5d62b22ca854642fc8295a36f8a9f0e8dcc0cb9ae372f0c49c3b715516af4eefc0bbba87d9bbb22ba59f72f2e0f8f2a9

  • SSDEEP

    98304:ry/wVk+PJgvJQ4boVqLcIJVryNaalQ1szWsUxJ:ry/8YU2PryrJKsUT

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/intpravitokasero

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d.bin
    .apk android

    com.backstay.miscommunicate

    com.backstay.miscommunicate.faintnesses


Android Permissions

594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d.bin

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

com.backstay.miscommunicate.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION