Static

static

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    We Are Illuminati_v4.0.2_mod.apk

  • Size

    80.5MB

  • MD5

    0c55ff3b47ddbb80a43924a06a90b3a2

  • SHA1

    3ca26e438ffa0356f17ab8602f5b576a4274ee2c

  • SHA256

    f2fc5e65cc3a5bf9d0aa9141b3eb4bc390dcb7a25483d0cd0bb6cabaae2013f0

  • SHA512

    dddb325b643c6eac3f7560e651f673ecac58385b8721e911766c6edf97d0329410dca276fea76f60a0b5c6b0a1cacd63ad649c312f0dee40345189d316e02c59

  • SSDEEP

    1572864:tFIVmVvvflPz87CvZI3+YQiHx95iMk3wAs31+aBBWY3m2C6K9WAEs8:tF2mV3NPg7b3+BiYJ3wAa7EGm2C6KvEH

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 4 IoCs

Files

  • We Are Illuminati_v4.0.2_mod.apk
    .apk android arch:arm

    br.com.tapps.weareilluminati

    com.clevertap.unity.CleverTapOverrideActivity


  • 172c2cc5f0aa25e1e4c921ce8b4f850c_unitybuiltinshaders_befb768ceec7fdc801033c1da20650e1.bundle
  • Compat.browser
  • DefaultWsdlHelpGenerator.aspx
    .js
  • Mono.Data.Sqlite.dll-resources.dat
  • RuntimeInitializeOnLoads.json
  • ScriptingAssemblies.json
  • System.Data.dll-resources.dat
  • UnityServicesProjectConfiguration.json
  • audience_network.dex
    .dex
  • boot.config
  • browscap.ini
  • catalog.json
  • catalog_2023.05.16.15.29.01.hash
  • catalog_2023.05.16.15.29.01.json
  • config
  • config.xml
    .xml
  • data.unity3d
  • defaultlocalgroup_assets_all_399ea74fbac0e4ed354a749d2ea0f93a.bundle
  • dynamic_default.json
  • features_config.json
  • firstworld_assets_all_72c1aad24c71e584cc4f3699f59bc74d.bundle
  • fourthworld_assets_all_59b14f90c2e260751b9f049fd71b232d.bundle
  • fyb_iframe_endcard_tmpl.html
    .html
  • fyb_static_endcard_tmpl.html
    .js
  • global-metadata.dat
  • google-services-desktop.json
  • ia_js_load_monitor.txt
    .html .js
  • ia_mraid_bridge.txt
    .html .js
  • info.txt
  • link.xml
  • localization_assets_all_5edc18d9c07fa8258814dc03fcae115f.bundle
  • machine.config
    .xml
  • mscorlib.dll-resources.dat
  • sdk_core.min.js
    .js
  • secondworld_assets_all_afec688763346c8119d992d5feb392a9.bundle
  • settings.json
  • settings.map
    .xml
  • sharedassets2.resource
  • stagessprites_assets_all_2cb2f334349620914aba174be0bed438.bundle
  • thirdworld_assets_all_e3e4163945ffb71e8b47077a3105fcec.bundle
  • tt_mime_type.pro
  • tt_na.czl
  • tt_nd
    .elf linux x86
  • unity default resources
  • vpaid_html_template.html
    .html .js
  • web.config
    .xml
  • webevent_assets_all_d4a944b268e37fb289fc2d27d49e3fe3.bundle

Android Permissions

We Are Illuminati_v4.0.2_mod.apk

Permissions

com.google.android.gms.permission.AD_ID

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

br.com.tapps.weareilluminati.permission.C2D_MESSAGE

com.android.vending.BILLING

com.android.vending.CHECK_LICENSE

com.singular.preinstall.READ_PERMISSION_SINGULAR