Overview

overview

10

Static

static

10

9a024d075a...85.apk

android-9-x86

6

9a024d075a...85.apk

android-10-x64

6

9a024d075a...85.apk

android-11-x64

6

i.apk

android-9-x86

8

i.apk

android-10-x64

1

i.apk

android-11-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a024d075aea9d1c68bdf27dbeed1c834f0831523f882a14ae0df0a5ffe7a385.bin

  • Size

    4.7MB

  • MD5

    250bb2e19a5201b2f94c58bade583a48

  • SHA1

    16ed757e508f2b50319479ecadd09bb913b4fc48

  • SHA256

    9a024d075aea9d1c68bdf27dbeed1c834f0831523f882a14ae0df0a5ffe7a385

  • SHA512

    119dee2a72200bf65f9f835b60cb6e4f1b4e5ae9c188c51bdf3405adc082f46f43593a8bc089c8d99f1dc73b8f82c011c70525e8b77001009630747d7ea657fc

  • SSDEEP

    98304:vB8IlBYuV0wIO3Ca9Vbley/tarfPh+zkYB3XWNTyqOEMK3jQ1:vf7FIO3mYt9q26Q1

Score
10/10
godfather

Malware Config

Extracted

Family

godfather

C2

https://t.me/intpravitokasero

Signatures

  • Godfather family
    godfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 9a024d075aea9d1c68bdf27dbeed1c834f0831523f882a14ae0df0a5ffe7a385.bin
    .apk android

    com.coalas.twiddlers

    com.coalas.twiddlers.julolidine


  • i.apk
    .apk android

    com.backstay.miscommunicate

    com.backstay.miscommunicate.faintnesses


Android Permissions

9a024d075aea9d1c68bdf27dbeed1c834f0831523f882a14ae0df0a5ffe7a385.bin

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES