Overview

overview

10

Static

static

10

8160d883fc...d8.apk

android-9-x86

4

8160d883fc...d8.apk

android-10-x64

4

8160d883fc...d8.apk

android-11-x64

4

i.apk

android-9-x86

7

i.apk

android-10-x64

6

i.apk

android-11-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    8160d883fc3b8bc7b902ab96d3de0fc21d48997d861a8b890d499aaa693f0bd8.bin
  • Size 4.6MB
  • Sample241019-13wbbssbjc
  • SHA256 8160d883fc3b8bc7b902ab96d3de0fc21d48997d861a8b890d499aaa693f0bd8
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
godfather

Malware Config

Extracted

Family

  • godfather

C2

  • https://t.me/tumonokasiperake

Signatures

  • Godfather family
    godfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

File Explorer

  • 8160d883fc3b8bc7b902ab96d3de0fc21d48997d861a8b890d499aaa693f0bd8.bin
    .apk 4.6MB
  • i.apk
    .apk 3.9MB

8160d883fc3b8bc7b902ab96d3de0fc21d48997d861a8b890d499aaa693f0bd8.bin

  • SHA256 8160d883fc3b8bc7b902ab96d3de0fc21d48997d861a8b890d499aaa693f0bd8
  • MD5 SHA1 SHA512 SSDEEP
android
com.chirau.absolutist

Android Permissions

8160d883fc3b8bc7b902ab96d3de0fc21d48997d861a8b890d499aaa693f0bd8.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES