pgs1[.]135[.]0_0[.]293[.]1_TgZmY[.]apk

General

Target

pgs1.135.0_0.293.1_TgZmY.apk
Size

316.7MB
MD5

71e9e49ed15bc911508dd7607e159cb5
SHA1

5430ea89663cb636503a7b392516ce7150898ce3
SHA256

c4a0b97e404753d106fdc6c7a232c0f4bdc77e51649679dd7fb4ad3aa18d756f
SHA512

08fce6bb12b8e979c1aa0ba4bbd933e29cbc0f9a17b59c3a2419efab63c03b0acb922556a19bba487bd510d32ac5f16597f15f7d05894b95d5a561392ff14909
SSDEEP

6291456:auAGQksx0jNEAFPYCroRodB1V0IYuf0uwspvo1uqJ5pGa6d9IZmT50FF3r/P:aMQB0xPPG+v0IYgvoYqJ5Aa0GZm1sprX

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Required to be able to advertise to nearby Bluetooth devices.	android.permission.BLUETOOTH_ADVERTISE
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to recognize physical activity.	android.permission.ACTIVITY_RECOGNITION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

pgs1.135.0_0.293.1_TgZmY.apk
.apk android arch:arm64 arch:arm

com.nianticlabs.pokemongo

com.nianticproject.holoholo.libholoholo.unity.UnityMainActivity

Activities

com.nianticproject.holoholo.libholoholo.unity.UnityMainActivity

android.intent.action.MAIN
android.intent.action.VIEW
com.nianticlabs.platform.sharedlogin.LOGINCONTENTPROVIDER
android.intent.action.VIEW
android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW
android.intent.action.VIEW

Permissions

com.android.vending.BILLING
android.permission.VIBRATE
android.permission.BLUETOOTH_SCAN
android.permission.BLUETOOTH_ADVERTISE
android.permission.BLUETOOTH_CONNECT
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.FOREGROUND_SERVICE
android.permission.POST_NOTIFICATIONS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
com.google.android.gms.permission.ACTIVITY_RECOGNITION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.CAMERA
android.hardware.camera.ar
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
android.permission.RECEIVE_BOOT_COMPLETED
com.nianticlabs.pokemongo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.nianticlabs.pokemongo.permission.C2D_MESSAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.ACTIVITY_RECOGNITION
com.nianticlabs.pokemongo.bgcore.util.contentProviderPermission
com.samsung.android.iap.permission.BILLING
android.permission.READ_CONTACTS

Receivers

com.unity.androidnotifications.UnityNotificationRestartOnBootReceiver

android.intent.action.BOOT_COMPLETED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.nianticproject.holoholo.libholoholo.appwidget.EggsWidget

android.appwidget.action.APPWIDGET_UPDATE

com.nianticproject.holoholo.libholoholo.appwidget.BuddyWidget

android.appwidget.action.APPWIDGET_UPDATE

com.nianticlabs.background.awareness.AwarenessReceiver

com.nianticlabs.GeofenceTransitionAction
com.nianticlabs.VisitAction

com.nianticlabs.background.awareness.VisitActivityReceiver

com.nianticlabs.DetectedStillActivityAction

com.nianticlabs.background.awareness.VisitDwellFenceReceiver

com.nianticlabs.VisitDwellAction

com.nianticlabs.background.awareness.BootReceiver

android.intent.action.BOOT_COMPLETED

com.nianticlabs.background.sensor.SensorBootReceiver

android.intent.action.BOOT_COMPLETED

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.cpp.ListenerService

com.google.firebase.MESSAGING_EVENT

com.nianticproject.holoholo.libholoholo.pushnotifications.NotificationListenerService

com.google.firebase.MESSAGING_EVENT

com.nianticlabs.pokemongoplus.service.BackgroundService

com.nianticlabs.pokemongoplus.service.ToServer
com.nianticlabs.pokemongoplus.service.BackgroundService

Android Permissions

pgs1.135.0_0.293.1_TgZmY.apk

Permissions

com.android.vending.BILLING

android.permission.VIBRATE

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_ADVERTISE

android.permission.BLUETOOTH_CONNECT

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.CAMERA

android.hardware.camera.ar

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

android.permission.RECEIVE_BOOT_COMPLETED

com.nianticlabs.pokemongo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.nianticlabs.pokemongo.permission.C2D_MESSAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACTIVITY_RECOGNITION

com.nianticlabs.pokemongo.bgcore.util.contentProviderPermission

com.samsung.android.iap.permission.BILLING

android.permission.READ_CONTACTS

Sharing

General

Malware Config

Signatures

Files

com.nianticlabs.pokemongo

com.nianticproject.holoholo.libholoholo.unity.UnityMainActivity

Activities

com.nianticproject.holoholo.libholoholo.unity.UnityMainActivity

com.facebook.CustomTabActivity

Permissions

Receivers

com.unity.androidnotifications.UnityNotificationRestartOnBootReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.nianticproject.holoholo.libholoholo.appwidget.EggsWidget

com.nianticproject.holoholo.libholoholo.appwidget.BuddyWidget

com.nianticlabs.background.awareness.AwarenessReceiver

com.nianticlabs.background.awareness.VisitActivityReceiver

com.nianticlabs.background.awareness.VisitDwellFenceReceiver

com.nianticlabs.background.awareness.BootReceiver

com.nianticlabs.background.sensor.SensorBootReceiver

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.messaging.cpp.ListenerService

com.nianticproject.holoholo.libholoholo.pushnotifications.NotificationListenerService

com.nianticlabs.pokemongoplus.service.BackgroundService

Android Permissions

pgs1.135.0_0.293.1_TgZmY.apk