Resubmissions

20/07/2026, 14:40

260720-r16jvadv7n10

20/07/2026, 09:50

260720-lt2dnadx6l10

General

  • Target
    d213377507bc658737768cfccb94eb4c6340629f10a766064de2fee8753694c6
  • Size 4.3MB
  • Sample260720-lt2dnadx6l
  • SHA256 d213377507bc658737768cfccb94eb4c6340629f10a766064de2fee8753694c6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: Gaganode

    Gaganode is an Android botnet.

  • Detects Gaganode Android botnet 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • d213377507bc658737768cfccb94eb4c6340629f10a766064de2fee8753694c6
    .apk 4.3MB

d213377507bc658737768cfccb94eb4c6340629f10a766064de2fee8753694c6

  • SHA256 d213377507bc658737768cfccb94eb4c6340629f10a766064de2fee8753694c6
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects Gaganode Android botnet

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
2f6f0d57d34900ca3345b1130f9ed26f3da4cb7fb67cec1ee6f41951434da41c
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=gaga,OU=gaga,O=gaga
com.gaganode.android

Android Permissions

d213377507bc658737768cfccb94eb4c6340629f10a766064de2fee8753694c6

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK