General

  • Target

    wtm_production_0.0.7.35.apk

  • Size

    76.0MB

  • MD5

    f1d2d2d6545e230b3a125cfd42487f3b

  • SHA1

    f4b333bef04df3d7fd84813e01b476d063e58e9f

  • SHA256

    a9ef505dea2f0cdd51c65a095f8146fd84b19fb81783c739197cac8390abbaf6

  • SHA512

    83c662faf5f8e71bce72f459867f34b61e247d133963a37831f2f8f6f177587c75f98e858c6fd88d70130264b5510b3480183da0adb234390525df263e7d9733

  • SSDEEP

    1572864:7Wm1uNuvHRsyP9VQdubmf2fYqKjPgjyhEAE3pM2iJk:x0N0HRsI9VCuZYqUgjyNEZhn

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • wtm_production_0.0.7.35.apk
    .apk android arch:arm64

    com.gaijingames.wtm

    com.gaijingames.wtm.wtm


  • aces.vromfs.bin
  • atlases.vromfs.bin
  • base.vromfs.bin
  • char.vromfs.bin
  • config.blk
  • fonts.vromfs.bin
  • game.vromfs.bin
  • guest_key
  • gui.vromfs.bin
  • images.vromfs.bin
  • lang.vromfs.bin
  • levels.rq2
  • meta.blk
  • miniUi.vromfs.bin
  • mis.vromfs.bin
  • patch.rq2
  • sound_min.rq2
  • tex.vromfs.bin
  • updater.blk
  • war_thunder_mobile.yup
  • webUi.vromfs.bin
    .ps1

Android Permissions

wtm_production_0.0.7.35.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.CHANGE_NETWORK_STATE

com.google.android.gms.permission.AD_ID

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.android.vending.BILLING

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.FOREGROUND_SERVICE