e890cc56017eceac984ed5431a0596f6806b3335f7ba03f88166b536722e7155[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

e890cc56017eceac984ed5431a0596f6806b3335f7ba03f88166b536722e7155.apk.zip
Size

96.9MB
MD5

2b11048e58593f5345324f690ed62872
SHA1

75dd91d6022e71a68cb3826fb641255875230e86
SHA256

272ad0deee5afa47c4d866162513e7c1e921c9be9ac32ec8958253ac6891140d
SHA512

466ecd01e5a38aca2ea9736f448ddbbbac74bc3e4ecb9a8dcaf661fcf428765d5c007ce10f2d3168aa4eb126cd0b95c7851c6287d5fa4ce0b80b613efb576f26
SSDEEP

3145728:O4c2yFb6SwmtXR270Jo4c3JyuS3Q2ZUsz8RzxyYX:nF+U0JuePZUs2xyYX

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

e890cc56017eceac984ed5431a0596f6806b3335f7ba03f88166b536722e7155.apk.zip
.zip

Password: infected
e890cc56017eceac984ed5431a0596f6806b3335f7ba03f88166b536722e7155.apk
.apk android arch:arm

com.mobile.legends

com.moba.unityplugin.MobaGameMainActivityWithExtractor

Activities

com.moba.unityplugin.MobaGameMainActivityWithExtractor

android.intent.action.MAIN
android.intent.action.VIEW

Permissions

android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.VIBRATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_PACKAGE_SIZE
android.permission.GET_ACCOUNTS
com.android.vending.BILLING
org.onepf.openiab.permission.BILLING
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
android.permission.INTERNET
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.NETWORK
android.permission.RECORD_AUDIO
android.permission.WAKE_LOCK
android.permission.CAMERA
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WRITE_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.BLUETOOTH
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.mobile.legends.permission.C2D_MESSAGE
android.permission.BATTERY_STATS
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.SET_WALLPAPER
MediaStore.Images.Media.INTERNAL_CONTENT_URI
MediaStore.Images.Media.EXTERNAL_CONTENT_URI
com.cleanmaster.mguard.permission.MTK_MESSAGE

Receivers

com.moba.unityplugin.ReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.moba.unityplugin.NotificationClickReceiver

notification_cancelled
notification_clicked

com.moba.unityplugin.NetworkStateReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.CampaignTrackingReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

com.moonton.plugin.apkshare.WifiAPStateReciever

android.net.wifi.WIFI_AP_STATE_CHANGED

Services

com.moba.unityplugin.MyVideoWallpaperService

android.service.wallpaper.WallpaperService

com.moba.unityplugin.MyFirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.moba.unityplugin.MyFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
1682092270f88d04bb434756a984ea87
182695e850938314fa6675a8926ad9ee
222c64d503379884db00185ebbe08590
27275fc7df2ec0346ba12831e6a01345
2cd1f5408130bdc4cbcf8c8fab8efd21
37590480333382341b5007dec2a032c6
49d954893947e4d48940f0fddc8c4225
509e324e9fdcff64eaf633f0dd32fbd4
5e82b392f79aa394fb1a579743600d5f
65ca32170bb371f459991a5d7696a9ba
720c2c242cde13e4188964c550502b5e
773417da4aa1b46409bd1e7574dcb251
773952d1ab5b7714392cdc5473b20244
7c0a1aa668787ad42a48d1a535825520
9300d87db4ad0b0439f6fb97c3ce8ccf
93c84009f8f004b4f84697c8cb12dd63
9f39f1d1f2f3ee04bb793082eee05819
AdditionDex.apk
.apk android
AdditionDex.apk.md5
Resources.dat
.7z
boot.config
c6f11eb0ceeb5e044b3199208e1a99bf
cf9ebc36d43f657468fecb524763e3bc
d1ba9e7ba321b2c4d97f6a19f1deab6a
e37f44f1a08cf594fb6b3919774527ed
e75727d9555d9d14ca51d91908c681bc
ed5591596df551e4c8f4b05ce88a7a07
eec9c90e5acd4d74d9e021119fc70cf8
f3fd145b191cf4040ac6b55cda352a53
f4f0faf73e6bf89419cf29b611f29ade
globalgamemanagers
globalgamemanagers.assets
google-services.json
hs__data
iplist.xml
.xml
level0
level1
realversion.xml
.xml
sharedassets0.assets
sharedassets1.assets
unity default resources
unity_builtin_extra
version.xml
.xml

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.mobile.legends

com.moba.unityplugin.MobaGameMainActivityWithExtractor

Activities

com.moba.unityplugin.MobaGameMainActivityWithExtractor

Permissions

Receivers

com.moba.unityplugin.ReferrerReceiver

com.moba.unityplugin.NotificationClickReceiver

com.moba.unityplugin.NetworkStateReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.CampaignTrackingReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.moonton.plugin.apkshare.WifiAPStateReciever

Services

com.moba.unityplugin.MyVideoWallpaperService

com.moba.unityplugin.MyFirebaseInstanceIdService

com.moba.unityplugin.MyFirebaseMessagingService