EU-HOLY[.]apk | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

EU-HOLY.apk
Size

140.9MB
MD5

727b2d3ec84ce3139998a79342fa324b
SHA1

503f4998eb0e88388e82dca578c411a2cfe6455a
SHA256

a8e383c5b54cd317118f44ee4daf1ed91617157321afb41702b8d2e18d6204cc
SHA512

a988c4996deddbb85db5411d1f40d5007f0eefed9a246147e564d4d3bd372f762f305cd810d2da15d7849d295576761370a1b469c11e3cf18266d83f345dfb17
SSDEEP

3145728:HpNSl2Yddm8JkVRE08/riv6i5cnExKp5A9ypV3f5CABx1HQd:6l2YfmQ0zCvWcf5A9SxBCABx1S

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

EU-HOLY.apk
.apk android arch:arm

com.ngame.allstar.eu

com.login.MainActivity

Activities

com.ngame.allstar.SGameActivity

FIREBASE_OPEN_ACTIVITY
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.ljoy.chatbot.FAQActivity

android.intent.action.VIEW

com.ljoy.chatbot.WebViewActivity

android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.login.MainActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.RESTART_PACKAGES
android.permission.WRITE_MEDIA_STORAGE
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.DISABLE_KEYGUARD
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_FINE_LOCATION
android.permission.RECORD_AUDIO
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
com.subao.permission.USE_SDK.com.garena.game.kgtw.KingsGlory
com.google.android.c2dm.permission.RECEIVE
com.ngame.allstar.eu.permission.C2D_MESSAGE
com.android.vending.BILLING
android.permission.FOREGROUND_SERVICE
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTINGS
android.permission.REORDER_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.CHANGE_WIFI_MULTICAST_STATE
com.vivo.notification.permission.BADGE_ICON
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_APP_BADGE
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE
com.asus.msa.SupplementaryDID.ACCESS
com.huawei.gameassistant.permission.PUBLIC_THIRD_API

Receivers

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.UPLOAD

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.adjust.sdk.AdjustReferrerReceiver

com.android.vending.INSTALL_REFERRER

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.intlgame.core.service.INTLXwidMessageNotifiedService

android.intent.action.FALE_Natified

com.intlgame.push.INTLFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.intlgame.common.ForegroundService

com.intlgame.ACTION_FOREGROUND_SERVICE

com.garena.game.badge.tencent.BadgeFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
12aa610ed4d1d474dac626695d0a1aff
218cd8ebeb256b34586867c16f0ca8c9
29a2ee6a3756a0648b200dde3d503da2
2bc0f5dea49052e4a83e581e342cac1f
322fb55a8d271d64fb126a7e681dac2b
356d7e3940126a24eb0456c0cc2fae8a
3a1e8f7bba2a8134383fb557656708c6
3f5b5dff67a942289a9defa416b206f3
3f7a1f46e9cb7cc4dbf888fddde68f09
453495a1eaef2754e934fd4914174b6a
464eb50dd8259ad478109f3638fab8cf
4fe959dcd997648498ba3bb8c1f2bdc0
5478a5b3e04d6d34c8d25f24016628d0
598ec614b7b11b04c91224a65ab9ece7
5a669fa1d2222e94cadfcf30fb1bffbe
5c24ff827b8a3f04cb787f6e45ec5763
5c3d3ff60dafa414b893aa937e3709fc
66895f71a8305444187f3c1fedaab781
6fcc49914cb404742857080a25577651
764530c82da866d4894f4e8d21349235
7d60d51b619c12b448fe523d1e2696d5
8067587380ca74e41a9711ab24058a9f
823a56f499736a246b0b28b1cbe6c581
889da701f1391694996a201827e38f3c
9430f7c33f7bc924c957f6e50ecbd28f
APASConfig.ini
HelveticaNeueLTPro-XBlkCn.otf
INTLConfig.ini
INTLDeviceLevel.json
INTLResultMsg.json
MeshFragShader.fsh
MeshVertShader.vsh
__accfinfo.tsb
__acinfo.tsb
__acsinfo.t.p.sin
a035255ec9b082d41990b29b74f34fd8
a253ed45d6d4c0a4ab166735d9d5e805
a3a5f386054ac0645813811fb59f30cf
ab71b9ff732362d41a9321adf4458799
ac7a63bdccc07af498f88abbd5e12c78
acdf6c80cf20eef4699dc63252ceb00d
acec8b09af333a24087796d057816a7d
acginf.dat
ad2970f3d6c69bc45a02412d6280327c
adconfig.ini
ae3613f965c624446bf237ebc28e6fac
allbootsres.assetbundle
b35f76ed48c53e2499a7b18321c697c8
b3e278bb29077974588f65f968efa2d4
b4ff4dfdab1314c40a646532d15aa507
background.9.png
.png
bcb3d401159e849799902e10430972ae
boot.config
buttonNegt.png
.png
buttonPost.png
.png
button_green.9.png
.png
button_red.9.png
.png
c58d80ef899a52b4bb8655ee09e88d19
c7735ebb4b1cbe9478ddb8e645f5be99
c8382377b56de864399fadf58ec483d5
ca2cf45a229722f4395d8813b31971ad
centauri_oversea_cp.cfg
cf47f2fdbeb03494e98b2dd23d086e3a
channel.ini
com.tencent.open.config.json
com.tencent.plus.bar.png
.png
com.tencent.plus.blue_disable.png
.png
com.tencent.plus.blue_down.png
.png
com.tencent.plus.blue_normal.png
.png
com.tencent.plus.gray_disable.png
.png
com.tencent.plus.gray_down.png
.png
com.tencent.plus.gray_normal.png
.png
com.tencent.plus.ic_error.png
.png
com.tencent.plus.ic_success.png
.png
com.tencent.plus.logo.png
.png
config.json
config.txt
.png
d03cdbfa91d125d4ea3770c2e3528c19
d82c1b31c7e74239bff1220585707d2b
e48eeea02525c45458a1253358ab7f4c
eaf2d66f4a726dd4ea4ca1a7d064683e
eb8a437b96398854d9056feed7ac18e7
eb8cf1caefbd5e543879e1e709ab5525
edf139000f8a3774c81662142c9bc647
f709dd9999469f644be6696b17ae333e
f717333c08aac314a884e45121c6b36f
f8ecda65b92f6e648a3bad3747adb6b1
f952c082cb03451daed3ee968ac6c63e
fade42e8bc714b018fac513c043d323b
fc226c0166d40c94b81ec965d3708a13
fcf7e91899194ea46a810151cf13915d
filelist.json.png
font.otf
game_resources.png
.7z
game_resources.png.res.png
globalgamemanagers
globalgamemanagers.assets
level0
level1
level2
level3
level4
level5
level6
level7
level8
libgvoicensmodel.bin
libwbsafeedit
.elf linux arm
libwbsafeedit_x86
.elf linux x86
local.crt
midas_oversea_cp.cfg
msdkinfo.ini
preload.assetbundle
release.crt
res.data
settings.xml
.xml
sharedassets0.assets
sharedassets1.assets
sharedassets2.assets
sharedassets3.assets
sharedassets4.assets
sharedassets5.assets
sharedassets6.assets
sharedassets7.assets
sharedassets8.assets
splash_00_static.assetbundle
test.crt
tme_config.json
unity default resources
unity_builtin_extra
yyb_appdetail_bg_floatingwindow.9.png
.png
yyb_appdetail_showmore.png
.png
yyb_friends.png
.png
yyb_icon_back.png
.png
yyb_qq.png
.png
yyb_qzone.png
.png
yyb_topbar.9.png
.png
yyb_weixin.png
.png

Android Permissions

EU-HOLY.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.RESTART_PACKAGES

android.permission.WRITE_MEDIA_STORAGE

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

com.subao.permission.USE_SDK.com.garena.game.kgtw.KingsGlory

com.google.android.c2dm.permission.RECEIVE

com.ngame.allstar.eu.permission.C2D_MESSAGE

com.android.vending.BILLING

android.permission.FOREGROUND_SERVICE

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_WIFI_MULTICAST_STATE

com.vivo.notification.permission.BADGE_ICON

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.ngame.allstar.eu

com.login.MainActivity

Activities

com.ngame.allstar.SGameActivity

com.ljoy.chatbot.FAQActivity

com.ljoy.chatbot.WebViewActivity

com.facebook.CustomTabActivity

com.login.MainActivity

Permissions

Receivers

com.google.android.gms.measurement.AppMeasurementReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.adjust.sdk.AdjustReferrerReceiver

Services

com.google.firebase.messaging.FirebaseMessagingService

com.intlgame.core.service.INTLXwidMessageNotifiedService

com.intlgame.push.INTLFirebaseMessagingService

com.intlgame.common.ForegroundService

com.garena.game.badge.tencent.BadgeFirebaseMessagingService

Android Permissions

EU-HOLY.apk