General

  • Target

    wtm_production_0.0.9.55.apk

  • Size

    77.6MB

  • MD5

    c4f344e6bb2ec2093bec018c7c800163

  • SHA1

    d8c5be1bf2326b462a3ff538c9c3d6b146b43871

  • SHA256

    20809179c5d9c4261f00b114b82f3209a049da18321c2f7168e715346da44348

  • SHA512

    4e71baf0be5b4233e223d9cd4ab650fa3c7a2d38dee42a833c9180679157079abd318fbaf368f6bd7bf5f37fb26294dd4108f67e60e6c8b56cbcb453c5c55a2d

  • SSDEEP

    1572864:liLIhcT8TcVLj4oWxgC67tzlMf+zqzSRUkTa4QTGOc89kLRxId0:HO34oWuC67HMfkqzTkWPTG7

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • wtm_production_0.0.9.55.apk
    .apk android arch:arm64

    com.gaijingames.wtm

    com.gaijingames.wtm.wtm


  • aces.vromfs.bin
  • atlases.vromfs.bin
  • base.vromfs.bin
  • char.vromfs.bin
  • config.blk
  • fonts.vromfs.bin
  • game.vromfs.bin
  • guest_key
  • gui.vromfs.bin
  • images.vromfs.bin
  • lang.vromfs.bin
  • levels.rq2
  • meta.blk
  • miniUi.vromfs.bin
  • mis.vromfs.bin
  • patch.rq2
  • pkg_secondary.rq2
  • sound_min.rq2
  • tex.vromfs.bin
  • updater.blk
  • war_thunder_mobile.yup
  • webUi.vromfs.bin
    .ps1

Android Permissions

wtm_production_0.0.9.55.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.CHANGE_NETWORK_STATE

com.google.android.gms.permission.AD_ID

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.android.vending.BILLING

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.FOREGROUND_SERVICE