Overview

overview

10

Static

static

10

5705b434e1...c6.apk

android-9-x86

6

5705b434e1...c6.apk

android-10-x64

6

5705b434e1...c6.apk

android-11-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6.bin

  • Size

    3.7MB

  • MD5

    eb4b2f66ff6b63730718457098e28553

  • SHA1

    db2d76eff8ac87e84b5c9550e7feaa45b084bd2d

  • SHA256

    5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6

  • SHA512

    1f1ac3269898a27e0ad0e83964c982774dc7d75998b6d3cc494d3e150ea651827882b72ecdc07b3cb07d4c396cba6538ff597517b6b247fa405f0c65abade498

  • SSDEEP

    98304:xEJERzdoJhv8xT3haCi3yQ1LRShhEEgIk:xKEtyyh4DTSnPpk

Score
10/10
godfather

Malware Config

Extracted

Family

godfather

C2

https://t.me/pdfemonaserokim

Signatures

  • Godfather family
    godfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6.bin
    .apk android

    com.litheness.ambivert

    com.litheness.ambivert.loincloth


Android Permissions

5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6.bin

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

com.litheness.ambivert.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION