Overview

overview

10

Static

static

10

0191d1e5b9...78.apk

android-9-x86

6

0191d1e5b9...78.apk

android-10-x64

4

0191d1e5b9...78.apk

android-11-x64

4

up.apk

android-9-x86

7

up.apk

android-10-x64

7

up.apk

android-11-x64

7

Resubmissions

07-11-2024 02:58

241107-dgnm2asrcs 10

05-11-2024 22:06

241105-1z69eszgmm 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0191d1e5b93f86788cbe12353e48759b881a46303bb5e0742737535552a7e478.bin

  • Size

    4.6MB

  • MD5

    0b4c13c1e4212eec5818419d64e6a281

  • SHA1

    4868c42ff1cdf666d6f81d74896ada59e38554cf

  • SHA256

    0191d1e5b93f86788cbe12353e48759b881a46303bb5e0742737535552a7e478

  • SHA512

    2908fa477e1cf726505f65276fdd49a83dc10ea693e72f522e6feb89678503910c09d573932f57bcdf3c8e8e1b57345ea0ca050efa8c29dcd9fffee7a9e6b5fa

  • SSDEEP

    98304:+uK7rPLSifw2dK3rsA+ss2TaJ+OE+1KwfVRDilp7RO4qiYnK:1K/P2FX4t2TBo9dBilNwq

Score
10/10
godfather

Malware Config

Extracted

Family

godfather

C2

https://t.me/zamukosaremopas

Signatures

  • Godfather family
    godfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 0191d1e5b93f86788cbe12353e48759b881a46303bb5e0742737535552a7e478.bin
    .apk android

    com.crescentformed.lactescent

    com.crescentformed.lactescent.photosynthesizing


  • up.apk
    .apk android

    com.omnibusriding.wallon

    com.omnibusriding.wallon.nitrites


Android Permissions

0191d1e5b93f86788cbe12353e48759b881a46303bb5e0742737535552a7e478.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES