Posted an analysis of a sample of Android/Sova. Nothing really new there, but if you want to understand how to turn Retrofit 2 code into a REST API / HTTP packets, it may help you.

https://cryptax.medium.com/eyes-on-android-s-o-v-a-botnet-sample-fb5ed332d08

#malware #SOVA #botnet #banking #Android