General

  • Target

    dd7105c33a4f4e909a5101cac59858db9a609c82221b91c1d339ab950e7fa88d.bin

  • Size

    4.6MB

  • MD5

    3d2a9206f2a42b41f9b1e80171144c0a

  • SHA1

    783fed9e10a4e4f92c1d1d0f2eecea6d9db4976d

  • SHA256

    dd7105c33a4f4e909a5101cac59858db9a609c82221b91c1d339ab950e7fa88d

  • SHA512

    b1ae28875c1347d606ec0457214d6b4ae44ee0a5d2dfd06cca23a33db05298565ecb55013577e8119a472251b367b095503b07276c17af9432aa1575966f4328

  • SSDEEP

    98304:M1/fajemaMSTukdgCI6FcPY5KVhxhQivktk2hn4ltjbP2L4+:M1XajemdKZh+sKV7hQr1oxJ+

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/uyamozakeposere

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • dd7105c33a4f4e909a5101cac59858db9a609c82221b91c1d339ab950e7fa88d.bin
    .apk android

    com.whample.peaveys

    com.whample.peaveys.lecterns


  • i.apk
    .apk android

    com.demodulation.xanthocyanopsia

    com.demodulation.xanthocyanopsia.Langobardic


Android Permissions

dd7105c33a4f4e909a5101cac59858db9a609c82221b91c1d339ab950e7fa88d.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES