DAGOTY-0[.]27[.]1[.]apk

General

Target

DAGOTY-0.27.1.apk
Size

60.2MB
MD5

cbabcfa33e85b208526ffa826386e022
SHA1

3c6041cd3460f544d1da5e62ff57eaf7a2f8c894
SHA256

eb80f1d5e58b91f27852b0f8405b3b478ae2cd5a4f9155f5f42fd59dc0dcf5b6
SHA512

5e717f4933313cb558e412d756dd354701c33fc842a1bd9107aa05dbdd425d76209f4f3910bad28ad8a06089239efe227d4e2ef81379af846844167df429668b
SSDEEP

1572864:ajIyobeRcyFnl63ZjQw/0ZZuXFzswvw1L:aPpRcQx8FzGh

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO

Files

DAGOTY-0.27.1.apk
.apk android arch:arm

com.axlebolt.standoff2

com.google.firebase.MessagingUnityPlayerActivity

Activities

com.google.firebase.MessagingUnityPlayerActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.axlebolt.webstore.LauncherActivity

android.intent.action.SEND
android.intent.action.VIEW

Permissions

com.android.vending.CHECK_LICENSE
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_IMAGES
android.permission.REQUEST_DELETE_PACKAGES
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.RECORD_AUDIO
android.permission.BLUETOOTH
android.permission.BLUETOOTH_CONNECT
com.google.android.gms.permission.AD_ID
com.adjust.preinstall.READ_PERMISSION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.VIBRATE
android.permission.POST_NOTIFICATIONS
android.permission.READ_MEDIA_AUDIO
com.google.android.c2dm.permission.RECEIVE
android.permission.FOREGROUND_SERVICE
com.axlebolt.standoff2.permission.C2D_MESSAGE
android.permission.READ_MEDIA_VIDEO
com.android.vending.BILLING
com.axlebolt.standoff2.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.adjust.sdk.AdjustPreinstallReferrerReceiver

com.attribution.SYSTEM_INSTALLER_REFERRER

com.adjust.sdk.AdjustReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.unity.androidnotifications.UnityNotificationRestartOnBootReceiver

android.intent.action.BOOT_COMPLETED

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

io.intercom.android.sdk.push.IntercomPushBroadcastReceiver

io.intercom.android.sdk.INTERCOM_PUSH_DISMISSED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.cpp.ListenerService

com.google.firebase.MESSAGING_EVENT

Android Permissions

DAGOTY-0.27.1.apk

Permissions

com.android.vending.CHECK_LICENSE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.REQUEST_DELETE_PACKAGES

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.RECORD_AUDIO

android.permission.BLUETOOTH

android.permission.BLUETOOTH_CONNECT

com.google.android.gms.permission.AD_ID

com.adjust.preinstall.READ_PERMISSION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_MEDIA_AUDIO

com.google.android.c2dm.permission.RECEIVE

android.permission.FOREGROUND_SERVICE

com.axlebolt.standoff2.permission.C2D_MESSAGE

android.permission.READ_MEDIA_VIDEO

com.android.vending.BILLING

com.axlebolt.standoff2.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files

com.axlebolt.standoff2

com.google.firebase.MessagingUnityPlayerActivity

Activities

com.google.firebase.MessagingUnityPlayerActivity

com.facebook.CustomTabActivity

com.axlebolt.webstore.LauncherActivity

Permissions

Receivers

com.adjust.sdk.AdjustPreinstallReferrerReceiver

com.adjust.sdk.AdjustReferrerReceiver

com.unity.androidnotifications.UnityNotificationRestartOnBootReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

io.intercom.android.sdk.push.IntercomPushBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.messaging.cpp.ListenerService

Android Permissions

DAGOTY-0.27.1.apk