microg[.]apk | Triage

General

Target

microg.apk
Size

6.2MB
MD5

162ac9d0a395dd03df61e4108b19bf58
SHA1

148889f24dc7c538156ba3d6f0dcd22c4d3390a2
SHA256

6602e14f7c099cd9c94ac3221f3bf4b542c03f9bf88eb26989bb1bc9c2022126
SHA512

2d2c3146e71e0033af79ae93a0045bf056e436bcc131f0512479fc1a67cc7f0d5414aff2cef97dd27b67ffa2f31ab0c281f13f5736bfad653a7e98ed12e5677b
SSDEEP

98304:EXvfZ1B/8gxR0ww05aw1Pk6xmyuItuPCej9gVhutgo4ZWfc0Q7EsrzZnXl+Z:E/xkGGmDZXmyFejE8goGNnV+Z

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

microg.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.mgoogle.android.gms

org.microg.gms.ui.SettingsActivity

Activities

org.microg.tools.AccountPickerActivity

com.google.android.gms.common.account.CHOOSE_ACCOUNT

org.microg.gms.auth.login.LoginActivity

com.google.android.gms.auth.login.LOGIN

org.microg.gms.auth.credentials.CredentialPickerActivity

com.google.android.gms.auth.api.credentials.PICKER

org.microg.gms.ui.SettingsActivity

android.intent.action.MAIN
android.intent.action.APPLICATION_PREFERENCES

org.microg.gms.accountsettings.ui.MainActivity

com.google.android.gms.accountsettings.MY_ACCOUNT
com.google.android.gms.accountsettings.ACCOUNT_PREFERENCES_SETTINGS
com.google.android.gms.accountsettings.PRIVACY_SETTINGS
com.google.android.gms.accountsettings.SECURITY_SETTINGS

org.microg.gms.accountsettings.ui.LoaderActivity

com.google.android.gms.accountsettings.action.BROWSE_SETTINGS

Permissions

android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.WAKE_LOCK
android.permission.QUERY_ALL_PACKAGES
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.READ_SYNC_STATS
com.mgoogle.android.c2dm.permission.RECEIVE
com.mgoogle.android.c2dm.permission.SEND
com.mgoogle.android.gtalkservice.permission.GTALK_SERVICE
com.mgoogle.gms.STATUS_BROADCAST
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST
android.permission.UPDATE_APP_OPS_STATS
android.permission.FAKE_PACKAGE_SIGNATURE
com.mgoogle.android.gms.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

org.microg.gms.checkin.TriggerReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.AIRPLANE_MODE
android.server.checkin.CHECKIN
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.PACKAGE_RESTARTED
com.mgoogle.android.c2dm.intent.RECEIVE
android.provider.Telephony.SECRET_CODE

org.microg.gms.gcm.PushRegisterReceiver

com.mgoogle.iid.TOKEN_REQUEST

org.microg.gms.gcm.SendReceiver

com.google.android.gcm.intent.SEND

org.microg.gms.gcm.TriggerReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.AIRPLANE_MODE
android.net.conn.CONNECTIVITY_CHANGE
android.net.conn.BACKGROUND_DATA_SETTING_CHANGED
org.microg.gms.gcm.RECONNECT
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.PACKAGE_RESTARTED
android.provider.Telephony.SECRET_CODE

org.microg.gms.gcm.UnregisterReceiver

android.intent.action.PACKAGE_DATA_CLEARED
android.intent.action.PACKAGE_FULLY_REMOVED
android.intent.action.PACKAGE_REMOVED

Services

org.microg.gms.checkin.CheckinService

com.google.android.gms.checkin.BIND_TO_SERVICE

org.microg.gms.gcm.PushRegisterService

com.mgoogle.android.c2dm.intent.REGISTER
com.mgoogle.android.c2dm.intent.UNREGISTER

org.microg.gms.auth.loginservice.GoogleLoginService

android.accounts.AccountAuthenticator
com.mgoogle.android.gsf.action.GET_GLS

org.microg.gms.auth.credentials.CredentialsService

com.google.android.gms.auth.api.credentials.service.START

org.microg.gms.auth.proxy.AuthProxyService

com.google.android.gms.auth.service.START

org.microg.gms.auth.appcert.AppCertService

com.google.android.gms.auth.be.appcert.AppCertService

org.microg.gms.auth.SignInService

com.google.android.gms.signin.service.START

org.microg.gms.DummyService

com.google.android.gms.accounts.ACCOUNT_SERVICE
com.google.android.gms.identity.service.BIND
com.google.android.gms.auth.service.START
com.google.android.gms.common.service.START
com.google.android.contextmanager.service.ContextManagerService.START
com.google.android.gms.auth.api.credentials.service.START
com.google.android.gms.gass.START
com.google.android.gms.audit.service.START

Android Permissions

microg.apk

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.WAKE_LOCK

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

com.mgoogle.android.c2dm.permission.RECEIVE

com.mgoogle.android.c2dm.permission.SEND

com.mgoogle.android.gtalkservice.permission.GTALK_SERVICE

com.mgoogle.gms.STATUS_BROADCAST

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST

android.permission.UPDATE_APP_OPS_STATS

android.permission.FAKE_PACKAGE_SIGNATURE

com.mgoogle.android.gms.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files

com.mgoogle.android.gms

org.microg.gms.ui.SettingsActivity

Activities

org.microg.tools.AccountPickerActivity

org.microg.gms.auth.login.LoginActivity

org.microg.gms.auth.credentials.CredentialPickerActivity

org.microg.gms.ui.SettingsActivity

org.microg.gms.accountsettings.ui.MainActivity

org.microg.gms.accountsettings.ui.LoaderActivity

Permissions

Receivers

org.microg.gms.checkin.TriggerReceiver

org.microg.gms.gcm.PushRegisterReceiver

org.microg.gms.gcm.SendReceiver

org.microg.gms.gcm.TriggerReceiver

org.microg.gms.gcm.UnregisterReceiver

Services

org.microg.gms.checkin.CheckinService

org.microg.gms.gcm.PushRegisterService

org.microg.gms.auth.loginservice.GoogleLoginService

org.microg.gms.auth.credentials.CredentialsService

org.microg.gms.auth.proxy.AuthProxyService

org.microg.gms.auth.appcert.AppCertService

org.microg.gms.auth.SignInService

org.microg.gms.DummyService

Android Permissions

microg.apk