Overview

overview

10

Static

static

10

7fef2c1490...39.apk

android-9-x86

4

7fef2c1490...39.apk

android-10-x64

4

7fef2c1490...39.apk

android-11-x64

4

app.apk

android-9-x86

6

app.apk

android-10-x64

6

app.apk

android-11-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7fef2c1490b7fb0b24eb516fc112ee4e4421e0d3b81c9d8429ca491e99401839.bin

  • Size

    4.6MB

  • MD5

    31b75022ddef6eb2b06af50ae94fd257

  • SHA1

    d6f66a25fcbc04228bd256a51755bad2c5196f4f

  • SHA256

    7fef2c1490b7fb0b24eb516fc112ee4e4421e0d3b81c9d8429ca491e99401839

  • SHA512

    ecaa5db022d1ef7f4583c4186a1c64a6aa61615092afcecd5383aa2d6880eb347d611b24dcf66a46b23cccad950941cf47e314cd5efdb6ab28c395a0bf00c73a

  • SSDEEP

    98304:VXsIOsIL8x+FD7Sy/gVr9V0zZE2lS87nwWfeFPjvqttu+IFP1:us2FD7/gVr9V0zZIxWfQ+tt3OP1

Score
10/10
godfather

Malware Config

Extracted

Family

godfather

C2

https://t.me/raposekosaramuz

Signatures

  • Godfather family
    godfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 7fef2c1490b7fb0b24eb516fc112ee4e4421e0d3b81c9d8429ca491e99401839.bin
    .apk android

    com.searcloth.neomorphism

    com.searcloth.neomorphism.runover


  • app.apk
    .apk android

    com.phenomenon.psychofugal

    com.phenomenon.psychofugal.encyclopedize


Android Permissions

7fef2c1490b7fb0b24eb516fc112ee4e4421e0d3b81c9d8429ca491e99401839.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES