General

  • Target

    car-parking-multiplayer-mod_4.8.12.6-an1.com.apk

  • Size

    782.4MB

  • MD5

    4041a0844f88088df5e5314be3ca6409

  • SHA1

    bd7162e4b64c9b9c36bc2a89c63dafffacd6f863

  • SHA256

    be5cbba281a4e489b9f04bdaeeb8fd33265a49faa4b2569b9441dce9413a2a38

  • SHA512

    651af74ff988a2a2407c0e25319e3ba94085705a8522ec6dad74198b3c02d9d0b333310104304eb445f80eeb44bbb463fa6eaab40dabf67aa8f6af861bf7b757

  • SSDEEP

    25165824:eFEw+LsFu5Ih3P8crvYvQiG8NvwbYfyOheDOZc:ekLsFGINP8vQixNtK1Oq

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Requests dangerous framework permissions 2 IoCs

Files

  • car-parking-multiplayer-mod_4.8.12.6-an1.com.apk
    .apk android arch:arm arch:arm64

    com.olzhas.carparking.multyplayer

    com.google.firebase.MessagingUnityPlayerActivity


  • 1021599621.wem
  • 123036701.wem
  • 132771513.wem
  • 199718431.wem
  • 289221873.wem
  • 320364507.wem
  • 355997126.wem
  • 410336900.wem
  • 433863922.wem
  • 45049399.wem
  • 461206077.wem
  • 522365014.wem
  • 59313253.wem
  • 70931163.wem
  • 717934914.wem
  • 754852081.wem
  • 780346564.wem
  • 798db20730fc1a513f04ab8a1a686735_unitybuiltinshaders_437225a385521a87d1cdc1d348d1f4a1.bundle
  • 799175690.wem
  • 800965739.wem
  • 840400151.wem
  • 849261200.wem
  • 922231197.wem
  • 968761218.wem
  • 9948685.wem
  • ACTk.Examples.Genuine.Runtime.pdb
  • ACTk.Examples.Runtime.pdb
  • ACTk.Runtime.pdb
  • AK.Wwise.Unity.API.WwiseTypes.pdb
  • AK.Wwise.Unity.API.pdb
  • AK.Wwise.Unity.MonoBehaviour.pdb
  • AK.Wwise.Unity.Timeline.pdb
  • Ak.Wwise.Api.WAAPI.pdb
  • AlmostEngine.pdb
  • Assembly-CSharp-firstpass.pdb
  • Assembly-CSharp.pdb
  • CPM.Account.pdb
  • CPM.CarEntities.pdb
  • CPM.CommonUtility.pdb
  • CPM.Connection.pdb
  • CPM.Logging.pdb
  • CPM.Messenger.pdb
  • CPM.Notifications.pdb
  • CPM.PendingRewards.pdb
  • CPM.PlayerData.pdb
  • CPM.RemoteConfig.pdb
  • CPMSoundBank.bnk
  • CPMSoundBank.txt
  • Compat.browser
  • DefaultWsdlHelpGenerator.aspx
    .js
  • EasySave3.pdb
  • FbxBuildTestAssets.pdb
  • Firebase.App.pdb
  • Firebase.Auth.pdb
  • Firebase.Firestore.pdb
  • Firebase.Functions.pdb
  • Firebase.Messaging.pdb
  • Firebase.Platform.pdb
  • Firebase.RemoteConfig.pdb
  • Firebase.TaskExtension.pdb
  • Init.bnk
  • Init.txt
  • LunarConsole.pdb
  • NGUI.pdb
  • NavMeshComponents.pdb
  • Newtonsoft.Json.UnityConverters.Addressables.pdb
  • Newtonsoft.Json.UnityConverters.pdb
  • Newtonsoft.Json.pdb
  • Obi.pdb
  • Persistence.pdb
  • PhotonChat.pdb
  • PhotonRealtime.pdb
  • PhotonUnityNetworking.Utilities.pdb
  • PhotonUnityNetworking.pdb
  • PhotonVoice.API.pdb
  • PhotonVoice.PUN.pdb
  • PhotonVoice.pdb
  • PluginInfo.json
  • PluginInfo.xml
    .xml
  • Purchasing.Common.pdb
  • RuntimeInitializeOnLoads.json
  • ScriptingAssemblies.json
  • Sirenix.OdinInspector.CompatibilityLayer.pdb
  • SoundbanksInfo.json
  • SoundbanksInfo.xml
    .xml
  • System.Data.dll-resources.dat
  • UniRx.pdb
  • UniTask.Addressables.pdb
  • UniTask.DOTween.pdb
  • UniTask.Linq.pdb
  • UniTask.TextMeshPro.pdb
  • UniTask.pdb
  • Unity.Addressables.pdb
  • Unity.Analytics.DataPrivacy.pdb
  • Unity.Burst.pdb
  • Unity.Collections.pdb
  • Unity.Formats.Fbx.Runtime.pdb
  • Unity.InputSystem.pdb
  • Unity.Mathematics.pdb
  • Unity.MemoryProfiler.pdb
  • Unity.Postprocessing.Runtime.pdb
  • Unity.ProBuilder.Csg.pdb
  • Unity.ProBuilder.KdTree.pdb
  • Unity.ProBuilder.Poly2Tri.pdb
  • Unity.ProBuilder.Stl.pdb
  • Unity.ProBuilder.pdb
  • Unity.ResourceManager.pdb
  • Unity.ScriptableBuildPipeline.pdb
  • Unity.Services.Core.Analytics.pdb
  • Unity.Services.Core.Configuration.pdb
  • Unity.Services.Core.Device.pdb
  • Unity.Services.Core.Environments.Internal.pdb
  • Unity.Services.Core.Environments.pdb
  • Unity.Services.Core.Internal.pdb
  • Unity.Services.Core.Networking.pdb
  • Unity.Services.Core.Registration.pdb
  • Unity.Services.Core.Scheduler.pdb
  • Unity.Services.Core.Telemetry.pdb
  • Unity.Services.Core.Threading.pdb
  • Unity.Services.Core.pdb
  • Unity.TextMeshPro.pdb
  • Unity.Timeline.pdb
  • UnityEngine.AIModule.pdb
  • UnityEngine.ARModule.pdb
  • UnityEngine.AccessibilityModule.pdb
  • UnityEngine.Advertisements.pdb
  • UnityEngine.AndroidJNIModule.pdb
  • UnityEngine.AnimationModule.pdb
  • UnityEngine.AssetBundleModule.pdb
  • UnityEngine.AudioModule.pdb
  • UnityEngine.ClothModule.pdb
  • UnityEngine.CoreModule.pdb
  • UnityEngine.CrashReportingModule.pdb
  • UnityEngine.DSPGraphModule.pdb
  • UnityEngine.DirectorModule.pdb
  • UnityEngine.GIModule.pdb
  • UnityEngine.GameCenterModule.pdb
  • UnityEngine.GridModule.pdb
  • UnityEngine.HotReloadModule.pdb
  • UnityEngine.IMGUIModule.pdb
  • UnityEngine.ImageConversionModule.pdb
  • UnityEngine.InputLegacyModule.pdb
  • UnityEngine.InputModule.pdb
  • UnityEngine.JSONSerializeModule.pdb
  • UnityEngine.LocalizationModule.pdb
  • UnityEngine.Monetization.pdb
  • UnityEngine.ParticleSystemModule.pdb
  • UnityEngine.PerformanceReportingModule.pdb
  • UnityEngine.Physics2DModule.pdb
  • UnityEngine.PhysicsModule.pdb
  • UnityEngine.ProfilerModule.pdb
  • UnityEngine.Purchasing.AppleCore.pdb
  • UnityEngine.Purchasing.AppleMacosStub.pdb
  • UnityEngine.Purchasing.AppleStub.pdb
  • UnityEngine.Purchasing.Codeless.pdb
  • UnityEngine.Purchasing.Security.pdb
  • UnityEngine.Purchasing.SecurityCore.pdb
  • UnityEngine.Purchasing.Stores.pdb
  • UnityEngine.Purchasing.WinRTCore.pdb
  • UnityEngine.Purchasing.WinRTStub.pdb
  • UnityEngine.Purchasing.pdb
  • UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.pdb
  • UnityEngine.ScreenCaptureModule.pdb
  • UnityEngine.SharedInternalsModule.pdb
  • UnityEngine.SpatialTracking.pdb
  • UnityEngine.SpriteMaskModule.pdb
  • UnityEngine.SpriteShapeModule.pdb
  • UnityEngine.StreamingModule.pdb
  • UnityEngine.SubstanceModule.pdb
  • UnityEngine.SubsystemsModule.pdb
  • UnityEngine.TLSModule.pdb
  • UnityEngine.TerrainModule.pdb
  • UnityEngine.TerrainPhysicsModule.pdb
  • UnityEngine.TextCoreModule.pdb
  • UnityEngine.TextRenderingModule.pdb
  • UnityEngine.TilemapModule.pdb
  • UnityEngine.UI.pdb
  • UnityEngine.UIElementsModule.pdb
  • UnityEngine.UIElementsNativeModule.pdb
  • UnityEngine.UIModule.pdb
  • UnityEngine.UNETModule.pdb
  • UnityEngine.UmbraModule.pdb
  • UnityEngine.UnityAnalyticsCommonModule.pdb
  • UnityEngine.UnityAnalyticsModule.pdb
  • UnityEngine.UnityConnectModule.pdb
  • UnityEngine.UnityCurlModule.pdb
  • UnityEngine.UnityTestProtocolModule.pdb
  • UnityEngine.UnityWebRequestAssetBundleModule.pdb
  • UnityEngine.UnityWebRequestAudioModule.pdb
  • UnityEngine.UnityWebRequestModule.pdb
  • UnityEngine.UnityWebRequestTextureModule.pdb
  • UnityEngine.UnityWebRequestWWWModule.pdb
  • UnityEngine.VFXModule.pdb
  • UnityEngine.VRModule.pdb
  • UnityEngine.VehiclesModule.pdb
  • UnityEngine.VideoModule.pdb
  • UnityEngine.WindModule.pdb
  • UnityEngine.XR.LegacyInputHelpers.pdb
  • UnityEngine.XRModule.pdb
  • UnityEngine.pdb
  • UnityServicesProjectConfiguration.json
  • Wwise_IDs.h
  • Zenject.pdb
  • airintakes_assets_all_db11685a771255cfd80872c660793f1a.bundle
  • bodyinteriors2_assets_all_5c39e0ca3243ab235bd31d355740d8fe.bundle
  • bodyinteriors_assets_all_f5da2f9afa7f4100a1503c426262cd5c.bundle
  • bodylods2_assets_all_8e008a659937d5e56f99535b5d0a1c94.bundle
  • bodylods_assets_all_94889e45f585ee71a003f776d1cb369a.bundle
  • boot.config
  • browscap.ini
  • carsbodyandkits0-115_assets_all_57cfbaf90ee9af94c7d015703369c930.bundle
  • carsbodyandkits116-134_assets_all_05a16dc0f5e54fc5eca1336d3e04dc7c.bundle
  • carsbodyandkits135-143_assets_all_8c9876a40a9b32cc89abe577fd1a0bfc.bundle
  • carsbodyandkits144-152_assets_all_eaa2111bf9cb2a707b5cec3887800710.bundle
  • carsbodyandkits153-162_assets_all_cb722a43ae5470bfccff416f2c19fad7.bundle
  • carsbodyandkits163-171_assets_all_713beb1cc0846762a74dcad7d06ff270.bundle
  • carsbodyandkits172-30_assets_all_1afbefe44f12f708256b50350c9382d8.bundle
  • carsbodyandkits180-_assets_all_a40527766146942cb98c8d7faf822a13.bundle
  • carsbodyandkits41-56_assets_all_300c7d3e3f62083591563bbcf736375b.bundle
  • carsbodyandkits57-99_assets_all_a674f54252ba2663776437fd2bd4fbad.bundle
  • catalog.json
  • common_assets_all_84b4e1d528052f038d82c8098c5b7d01.bundle
  • config
  • config.xml
    .xml
  • data.unity3d
  • datapack.unity3d
  • default_assets_all_ea7a49d282c4fe04f83d4eded944999c.bundle
  • desc.txt
  • duplicateassetisolation11_assets_all_11dc37c076de6e77c3c0b66b80e66be0.bundle
  • duplicateassetisolation1_assets_all_17840f9f8c6e0ffc7160bc8deba481e4.bundle
  • duplicateassetisolation1_assets_all_49151207bfe85830b51b0f341c85a2fb.bundle
  • duplicateassetisolation2_assets_all_d8b28f53234a93047a652f25c1341ed9.bundle
  • duplicateassetisolation2_assets_all_fef2533b7207803663520b3d369ed34e.bundle
  • duplicateassetisolation3_assets_all_c86fc1013f29b3d18dca16e4fd71a675.bundle
  • duplicateassetisolation4_assets_all_3ee422ecefaa5a21d95e461b7917cc49.bundle
  • duplicateassetisolation6_assets_all_d185846dffc99f987758d0d75b69f74a.bundle
  • duplicateassetisolation7_assets_all_85873ee8caf8b15b2ccc4d6a5f20fd9e.bundle
  • duplicateassetisolation8_assets_all_8092a3b4cb0c3b21a0fac081b74659e4.bundle
  • duplicateassetisolation9_assets_all_a25d0f2c895a4440cf33b1646c01aea9.bundle
  • duplicateassetisolation_assets_all_2554a3099837ebafe16203203d39aebd.bundle
  • global-metadata.dat
  • google-services-desktop.json
  • link.xml
  • machine.config
    .xml
  • mscorlib.dll-resources.dat
  • resources.resource
  • sellmodels_assets_all_ee1a5c6da94bfb5b56adbdf31446d182.bundle
  • settings.json
  • settings.map
    .xml
  • sharedassets13.resource
  • sharedassets2.resource
  • spoilers_assets_all_04ae1c2b67c2a84b42ab952d8c3d262c.bundle
  • unity default resources
  • web.config
    .xml

Android Permissions

car-parking-multiplayer-mod_4.8.12.6-an1.com.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.BLUETOOTH

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.android.vending.BILLING

com.google.android.gms.permission.AD_ID

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.POST_NOTIFICATIONS

com.olzhas.carparking.multyplayer.permission.C2D_MESSAGE