Overview

overview

10

Static

static

10

ffbb3a7324...cb.apk

android-9-x86

4

ffbb3a7324...cb.apk

android-10-x64

4

ffbb3a7324...cb.apk

android-11-x64

4

i.apk

android-9-x86

6

i.apk

android-10-x64

7

i.apk

android-11-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffbb3a7324509743687663ac25da0fbb6a5e97b8534435c13e214abc6b5173cb.bin

  • Size

    4.6MB

  • MD5

    4097e239c5b6868f3d305778f50fc390

  • SHA1

    1100f8db4daed6dcf8a5f481f836db776259bb90

  • SHA256

    ffbb3a7324509743687663ac25da0fbb6a5e97b8534435c13e214abc6b5173cb

  • SHA512

    f872aec265e1aef89ce2ec93f86f471871b81f0dad34e27e67eaa47e9a27657fb1e83a8ea9cb7071d1a22f71b7dbde5fa5dc8ecc85751b676f1b4e5b8f37bbab

  • SSDEEP

    98304:rlpy6heWAq453GFuaggPCtNuXIlAaroMmuOT3vm5hKgTU+gzVEFuRU8uInJD/:rl06n96T6IlAar3muOTfs0gIvEF6U8uk

Score
10/10
godfather

Malware Config

Extracted

Family

godfather

C2

https://t.me/napikozaremossod

Signatures

  • Godfather family
    godfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • ffbb3a7324509743687663ac25da0fbb6a5e97b8534435c13e214abc6b5173cb.bin
    .apk android

    com.effectualize.filthfed

    com.effectualize.filthfed.beechnut


  • i.apk
    .apk android

    com.overtrample.unlatched

    com.overtrample.unlatched.stormtossed


Android Permissions

ffbb3a7324509743687663ac25da0fbb6a5e97b8534435c13e214abc6b5173cb.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES