General
- Target 3.apk
- Size 5.8MB
- Sample260914-tf2fhaeq3s
- SHA256 138551cd967622832f8a816ea1697a5d08ee66c379d32d8a6bd7fca9fdeaecc4
- MD5 c685ca051d3ca0cdee08f5a33a548031
- SHA1 e2757e1edd96238202862ba5e7f926f5a3911e17
- SHA512 fea2bdfe6653a1cba5c97ce87a464e56dc9deb0ac44ce17fcf7ff741d1630e0193e16c787bb6d457c72b7da8ae7d3547ad18c953fb2aeed8c58c3a0a3d016527
- SSDEEP 98304:R/eo4hMLS/ppS5HjEoPkB49NLcJ7FJfWememnetVbIhXicG9bL+cLudyETyzfr9E:R/eo4t/jvqchnZCetVby09bCQudyMMH2
- TLSH T15256F042FB44AC7BC8F783324675163A563BCC658B43D287295C327C59B79DC4B8AAC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
3.apk
Resource
android-35-x64-arm64-20260325-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
godfather
C2
-
https://t.me/varezotukomirza
Targets
-
- Target 3.apk
- Size 5.8MB
- SHA256 138551cd967622832f8a816ea1697a5d08ee66c379d32d8a6bd7fca9fdeaecc4
- MD5 c685ca051d3ca0cdee08f5a33a548031
- SHA1 e2757e1edd96238202862ba5e7f926f5a3911e17
- SHA512 fea2bdfe6653a1cba5c97ce87a464e56dc9deb0ac44ce17fcf7ff741d1630e0193e16c787bb6d457c72b7da8ae7d3547ad18c953fb2aeed8c58c3a0a3d016527
- SSDEEP 98304:R/eo4hMLS/ppS5HjEoPkB49NLcJ7FJfWememnetVbIhXicG9bL+cLudyETyzfr9E:R/eo4t/jvqchnZCetVby09bCQudyMMH2
- TLSH T15256F042FB44AC7BC8F783324675163A563BCC658B43D287295C327C59B79DC4B8AAC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: GodFather
GodFather is an Android banking trojan targeting Turkish users first seen in March 2022.
Acquires the wake lock
Requests enabling of the accessibility settings.