godfather | 36d899b738f0b6dd577c1222f51a0bb19cd038690d39c7b6be4e4c4c3687e2c4[.]bin

General

Target

36d899b738f0b6dd577c1222f51a0bb19cd038690d39c7b6be4e4c4c3687e2c4.bin
Size

3.9MB
MD5

abd81cf3135d94171f458a9fd1daa846
SHA1

a9396a706bcf7b36927a6b12e34545c6836fed03
SHA256

36d899b738f0b6dd577c1222f51a0bb19cd038690d39c7b6be4e4c4c3687e2c4
SHA512

b4e5232125ae0db2f33e3ae763b0a7b71bc0eef12262451d1c46ac9208c155748f4f3cde0310f75fe9484a2daa737670fa66e473f8b0275f297b1b180d26b49b
SSDEEP

98304:7u/zIKslV+cJ3ooy5UC/SgWc624SY/j+p1c:7uKVpoomJSgWhSYCTc

Score

10^/10

godfather

Family

godfather

C2

https://t.me/paperokomozase

Declares services with permission to bind to the system 1 IoCs

Processes:

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 1 IoCs

Processes:

description ioc

Allows an app to post notifications. android.permission.POST_NOTIFICATIONS

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

com.subdeltoid.armin.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION