1ca5a28b27b51ad77c8f308897effe7164ffbfbc61097a8ebb795a3c2f5421ba[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

1ca5a28b27b51ad77c8f308897effe7164ffbfbc61097a8ebb795a3c2f5421ba.apk.zip
Size

104.9MB
MD5

3218264e5ce37c17ce48dfec2a763fed
SHA1

859204ff9a1ee71718c0f580f516a336c11db24d
SHA256

3e45a79177e98b6cab1c7e792b795728f465a45346f55b8f1bb8336e4590ea62
SHA512

006724e33c57f5707a8070ff2039433954ff47b69615f83540d5c2167828adb143b8a61df73226501122ee513aae9abb7b62a9804f20818470c3f1b379cf411a
SSDEEP

1572864:xK1RVxawU1qgAE6HK0LSRFuhRhFo+yrwvHlKR5yDI7xE+RoG7KZh+7Bk:xKLraw5gAjq0LSRchb++yMswDIBuGmzt

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

1ca5a28b27b51ad77c8f308897effe7164ffbfbc61097a8ebb795a3c2f5421ba.apk.zip
.zip

Password: infected
1ca5a28b27b51ad77c8f308897effe7164ffbfbc61097a8ebb795a3c2f5421ba.apk
.apk android arch:arm

com.norwichsidegames.tothemoon

com.unity3d.player.UnityPlayerActivity

Activities

com.unity3d.player.UnityPlayerActivity

android.intent.action.MAIN

io.presage.mraid.browser.ShortcutActivity

android.intent.action.MAIN

io.presage.mraid.browser.Android8AndLaterShortcutActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID
com.adjust.preinstall.READ_PERMISSION
android.permission.VIBRATE
android.permission.FOREGROUND_SERVICE
android.permission.WAKE_LOCK
com.android.vending.BILLING
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.QUERY_ALL_PACKAGES
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE

Receivers

com.adjust.sdk.AdjustPreinstallReferrerReceiver

com.attribution.SYSTEM_INSTALLER_REFERRER

com.adjust.sdk.AdjustReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.unity.androidnotifications.UnityNotificationRestartOnBootReceiver

android.intent.action.BOOT_COMPLETED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.ogury.analytics.receiver.UserPresentReceiver

android.intent.action.USER_PRESENT

com.ogury.analytics.receiver.BootCompletedReceiver

android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.BOOT_COMPLETED

com.ogury.analytics.receiver.TimeSetReceiver

android.intent.action.TIME_SET

com.ogury.analytics.receiver.CarrierConfigChangedReceiver

android.telephony.action.CARRIER_CONFIG_CHANGED

com.ogury.analytics.receiver.NextAlarmClockChangedReceiver

android.app.action.NEXT_ALARM_CLOCK_CHANGED

com.ogury.analytics.receiver.EventReminderReceiver

android.intent.action.EVENT_REMINDER

com.ogury.analytics.receiver.BluetoothReceiver

android.bluetooth.device.action.ACL_CONNECTED
android.bluetooth.device.action.ACL_DISCONNECTED
android.hardware.usb.action.USB_ACCESSORY_DETACHED

com.ogury.analytics.receiver.PackageFullyRemovedReceiver

android.intent.action.PACKAGE_FULLY_REMOVED

com.ogury.core.internal.OguryLogEnablerReceiver

com.ogury.sdk.intent.ENABLE_LOGS

Services
Compat.browser
DefaultWsdlHelpGenerator.aspx
.js
RuntimeInitializeOnLoads.json
ScriptingAssemblies.json
System.Data.dll-resources.dat
audience_network.dex
.dex
boot.config
browscap.ini
cid
.elf linux x86
config
config.xml
.xml
data.unity3d
dynamic_default.json
features_config.json
fyb_iframe_endcard_tmpl.html
.html
fyb_static_endcard_tmpl.html
.js
global-metadata.dat
google-services-desktop.json
host.apk
.apk android arch:arm

com.xmbz.staticcheathost

com.xmbz.staticcheathost.MainActivity

Activities

Permissions

android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE

Services

com.didi.xmbz.delegate.RemoteService

com.xmbz.staticcheathost.intent.ACTION_DAEMON_SERVICE
ia_js_load_monitor.txt
.html .js
ia_mraid_bridge.txt
.html .js
machine.config
.xml
mscorlib.dll-resources.dat
plugin.apk
.apk android arch:arm

com.xmbz.window.plugin

com.xmbz.window.plugin.MainActivity

Activities

com.xmbz.window.plugin.MainActivity

android.intent.action.MAIN
resources.resource
settings.json
settings.map
.xml
sharedassets1.resource
tt_mime_type.pro
unity default resources
vpaid_html_template.html
.html .js
web.config
.xml

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.norwichsidegames.tothemoon

com.unity3d.player.UnityPlayerActivity

Activities

com.unity3d.player.UnityPlayerActivity

io.presage.mraid.browser.ShortcutActivity

io.presage.mraid.browser.Android8AndLaterShortcutActivity

Permissions

Receivers

com.adjust.sdk.AdjustPreinstallReferrerReceiver

com.adjust.sdk.AdjustReferrerReceiver

com.unity.androidnotifications.UnityNotificationRestartOnBootReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.ogury.analytics.receiver.UserPresentReceiver

com.ogury.analytics.receiver.BootCompletedReceiver

com.ogury.analytics.receiver.TimeSetReceiver

com.ogury.analytics.receiver.CarrierConfigChangedReceiver

com.ogury.analytics.receiver.NextAlarmClockChangedReceiver

com.ogury.analytics.receiver.EventReminderReceiver

com.ogury.analytics.receiver.BluetoothReceiver

com.ogury.analytics.receiver.PackageFullyRemovedReceiver

com.ogury.core.internal.OguryLogEnablerReceiver

Services

com.xmbz.staticcheathost

com.xmbz.staticcheathost.MainActivity

Activities

Permissions

Services

com.didi.xmbz.delegate.RemoteService

com.xmbz.window.plugin

com.xmbz.window.plugin.MainActivity

Activities

com.xmbz.window.plugin.MainActivity