Resubmissions

06/11/2023, 13:02

231106-p9z3babc4z 7

06/11/2023, 13:01

231106-p87qrsbc4x 7

General

  • Target

    wtm_production_1.3.0.58.apk

  • Size

    124.3MB

  • MD5

    2421247e6d34b4fdf80de6dc0fe00275

  • SHA1

    ddec02b8374c3f7150d0ac93a505e34258b031b6

  • SHA256

    5f2073051af42f54ceb65ff051291a3588e16c5fc1dbab7e1592e1a67bdd4643

  • SHA512

    811f378f14685f4ced62755eb29e35df12a19986ed1a0f7a12ff67c4311534e7d1a38dc8073bbf237c030bd0286c5695013f323b3a4a19d4630d0fbc1bb77e1b

  • SSDEEP

    3145728:hCOQx2wR3VkO1CPLdg5HTIt+/cC8CZbAdTUTdFzlUORb0mFmcxdKwu:szkwR35MLdg9Et+EC8CdgQdFzaO90mL8

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs

Files

  • wtm_production_1.3.0.58.apk
    .apk android arch:arm64

    com.gaijingames.wtm

    com.gaijingames.wtm.VersionSelector


  • aces.vromfs.bin
  • atlases.vromfs.bin
  • base.vromfs.bin
  • char.vromfs.bin
  • config.blk
  • fonts.vromfs.bin
  • game.vromfs.bin
  • guest_key
  • gui.vromfs.bin
  • images.vromfs.bin
  • lang.vromfs.bin
  • launcher.bank
  • launcher.strings.bank
  • levels.rq2
  • meta.blk
  • miniUi.vromfs.bin
  • mis.vromfs.bin
  • patch.rq2
  • pkg_secondary.rq2
  • sound_min.rq2
  • tex.vromfs.bin
  • updater.blk
  • versions.blk
  • war_thunder_mobile.yup
  • webUi.vromfs.bin
    .ps1

Android Permissions

wtm_production_1.3.0.58.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.CHANGE_NETWORK_STATE

com.google.android.gms.permission.AD_ID

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.android.vending.BILLING

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.FOREGROUND_SERVICE