Overview

overview

10

Static

static

10

741b504df6...8e.apk

android-9-x86

4

741b504df6...8e.apk

android-10-x64

4

741b504df6...8e.apk

android-11-x64

4

up.apk

android-9-x86

6

up.apk

android-10-x64

6

up.apk

android-11-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    741b504df6a736d40340820337881783723cb758446a48210208b302e48c648e.bin

  • Size

    4.6MB

  • MD5

    1667004ef76b2efd4070f2e42464c413

  • SHA1

    d6d0052e9f4342ac1b2a8bf7e6c21a3055b41941

  • SHA256

    741b504df6a736d40340820337881783723cb758446a48210208b302e48c648e

  • SHA512

    77d49bf8f7ba587f133d3581284c78b22b653837db234d553d3a62f2f9aaaf16f7bdd7f60a217fc9091db39b02adc0eb326be8872466c1b70fddb02ffc417c1b

  • SSDEEP

    98304:Cj/ReGoLwn4KnfFAWnhcAhZzS8uSiEMB7Mc2HxAFEeWAk/EUkCCC67Wi:CdJoC44fKAhZG8uSK+cure7k/EnC6Ki

Score
10/10
godfather

Malware Config

Extracted

Family

godfather

C2

https://t.me/trinomazkonera

Signatures

  • Godfather family
    godfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 741b504df6a736d40340820337881783723cb758446a48210208b302e48c648e.bin
    .apk android

    com.fester.archidiaceae

    com.fester.archidiaceae.conservatories


  • up.apk
    .apk android

    com.unseptated.underhung

    com.unseptated.underhung.ladderway


Android Permissions

741b504df6a736d40340820337881783723cb758446a48210208b302e48c648e.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES