General

  • Target

    5a7a4173220faab2749448d7841107c19c8ca1de5fe28b2c44c350c08ad890fa.bin

  • Size

    3.9MB

  • MD5

    095949779888f66b733dbcc238d7e183

  • SHA1

    ce54b5aea00bc1177c1f4a5dc71747f381285038

  • SHA256

    5a7a4173220faab2749448d7841107c19c8ca1de5fe28b2c44c350c08ad890fa

  • SHA512

    c2a807791ec475a87b7d4d925763bb16213a2fb86b7971cbb7020b36faf5a8354c8be9590bac2739a800162bc113a1674ad5e6e9d3112120470853ad32229261

  • SSDEEP

    98304:uyR6vm+i2c2f3qyeImQ65QUL1s7ASym7M8YiIHzk9F0K:us6vm+zTfBeImTB1YhLgkII92K

Score
10/10

Malware Config

Extracted

Family

godfather

C2

https://t.me/zamukosaremopas

Signatures

  • Godfather family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 5a7a4173220faab2749448d7841107c19c8ca1de5fe28b2c44c350c08ad890fa.bin
    .apk android

    com.postable.conchylium

    com.postable.conchylium.cervicobrachial


Android Permissions

5a7a4173220faab2749448d7841107c19c8ca1de5fe28b2c44c350c08ad890fa.bin

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

com.postable.conchylium.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION