Overview

overview

10

Static

static

10

c175f15175...47.apk

android-9-x86

4

c175f15175...47.apk

android-10-x64

4

c175f15175...47.apk

android-11-x64

4

i.apk

android-9-x86

7

i.apk

android-10-x64

6

i.apk

android-11-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647.bin

  • Size

    4.6MB

  • MD5

    4abc56d891cf2946b33a89686b62dfff

  • SHA1

    8650158b8f9e67624968283984ff3a830826acf5

  • SHA256

    c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647

  • SHA512

    c4b739af85c8cf7e0ea464a652df4daa5c51a6a7ddf959411785362e696254ee9c983dfb044acbb1aebc8329c4298b29be50533e8ce9003bc5bfba223f4f71ef

  • SSDEEP

    98304:i+MH/WZx5eKxtIDazNhu4QmgNOYwXxYQMvEp7nx:s/WoKxTzfRgSXxY1sx

Score
10/10
godfather

Malware Config

Extracted

Family

godfather

C2

https://t.me/uyamozakeposere

Signatures

  • Godfather family
    godfather
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647.bin
    .apk android

    com.cyphered.owaneco

    com.cyphered.owaneco.Painter


  • i.apk
    .apk android

    com.suldan.kecksy

    com.suldan.kecksy.BSMusEd


Android Permissions

c175f15175a8053064cc6261c29ffa08524b1da3ecd3408747c11f84185fe647.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES