Overview

overview

10

Static

static

10

bef423d295...d4.apk

android-9-x86

4

bef423d295...d4.apk

android-10-x64

4

bef423d295...d4.apk

android-11-x64

4

up.apk

android-9-x86

7

up.apk

android-10-x64

7

up.apk

android-11-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    bef423d295134df14517f742c30353a91686fd9438b9bcc568d77e99f9ee0fd4.bin

  • Size

    4.4MB

  • MD5

    fac23139d0727cf2654ec6bc0b20e1a0

  • SHA1

    a8210050a7eca1486e188a6e4222b5083ba59001

  • SHA256

    bef423d295134df14517f742c30353a91686fd9438b9bcc568d77e99f9ee0fd4

  • SHA512

    beae6a5abca47643a87621c6322c8a73657d19ef2a1171aef1d0e28a4ff9f55157f65420bc3c33ffeac231412bdf267e9193c39d0f1a5aedc841332416363492

  • SSDEEP

    98304:WyFxt0fsIaTfhwmGKfrr8WnzCjuY3gSbF8R1VlfKhJveJzwwP:WoHJfFLz4ZHbFe1Vlf4eJkwP

Score
10/10
godfather

Malware Config

Extracted

Family

godfather

C2

https://t.me/pdfemonaserokim

Signatures

  • Godfather family
    godfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • bef423d295134df14517f742c30353a91686fd9438b9bcc568d77e99f9ee0fd4.bin
    .apk android

    com.languish.undenied

    com.languish.undenied.honeydewed


  • up.apk
    .apk android

    com.litheness.ambivert

    com.litheness.ambivert.loincloth


Android Permissions

bef423d295134df14517f742c30353a91686fd9438b9bcc568d77e99f9ee0fd4.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES