godfather | 5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6[.]bin

General

Target

5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6.bin
Size

3.7MB
MD5

eb4b2f66ff6b63730718457098e28553
SHA1

db2d76eff8ac87e84b5c9550e7feaa45b084bd2d
SHA256

5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6
SHA512

1f1ac3269898a27e0ad0e83964c982774dc7d75998b6d3cc494d3e150ea651827882b72ecdc07b3cb07d4c396cba6538ff597517b6b247fa405f0c65abade498
SSDEEP

98304:xEJERzdoJhv8xT3haCi3yQ1LRShhEEgIk:xKEtyyh4DTSnPpk

Score

10^/10

godfather

Family

godfather

C2

https://t.me/pdfemonaserokim

Declares services with permission to bind to the system 1 IoCs

Processes:

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 1 IoCs

Processes:

description ioc

Allows an app to post notifications. android.permission.POST_NOTIFICATIONS

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

com.litheness.ambivert.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION