Overview

overview

10

Static

static

10

2a2f7c941b...ef.apk

android-9-x86

4

2a2f7c941b...ef.apk

android-10-x64

4

2a2f7c941b...ef.apk

android-11-x64

4

up.apk

android-9-x86

7

up.apk

android-10-x64

7

up.apk

android-11-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a2f7c941ba799e9c46577f0b4d3d2e1db286a83379bf46f2a2a1002f9bf56ef.bin

  • Size

    4.6MB

  • MD5

    57f0dcd590e74503458ee38c80438ce0

  • SHA1

    2d79e02d35c8897cdf3c3e59a8802462424fccda

  • SHA256

    2a2f7c941ba799e9c46577f0b4d3d2e1db286a83379bf46f2a2a1002f9bf56ef

  • SHA512

    7635be76db64f33466f7d2b3ba41968e4bf205e82548cf0e401f47023c2c702143b765f510607e3767223de97113dbe2d27370a15e24e0f64bdb2102cfb7191e

  • SSDEEP

    98304:bgvytJGPNSgxNoKDofPWMqzD6DrjnSy9LNREL4e83uLTEk:bgvytqNSANoMonWMqzDmbdL9k

Score
10/10
godfather

Malware Config

Extracted

Family

godfather

C2

https://t.me/trinomazkonera

Signatures

  • Godfather family
    godfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 2a2f7c941ba799e9c46577f0b4d3d2e1db286a83379bf46f2a2a1002f9bf56ef.bin
    .apk android

    com.sarcocarcinoma.slenderstalked

    com.sarcocarcinoma.slenderstalked.Micheal


  • up.apk
    .apk android

    com.palpacle.disfavorer

    com.palpacle.disfavorer.yolkless


Android Permissions

2a2f7c941ba799e9c46577f0b4d3d2e1db286a83379bf46f2a2a1002f9bf56ef.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES