General

  • Target

    car-parking-multiplayer-v4.8.16.3-MOD1-gamekillerapp.com.apk

  • Size

    890.0MB

  • MD5

    63887d53541e5375fa51d5551e705b85

  • SHA1

    474a668f63c6114b08a09edce1ac740604890817

  • SHA256

    0f795245b30d82e0937dbc44ef1da3a3ff72d934b890651902661ff17128e9bc

  • SHA512

    8b6657c040a14b6a35b83bbf341b1f311d61958c6dd9695c1a675711eadee095c4e81cb663ba31738496467b1a61367d85690d3cbb4cf1dcc295ac1290aa0322

  • SSDEEP

    12582912:GjXb/zwIrH6me7d+vbdm843+Xx0BbpsrM3o6P9MK8gYNFNMmxP:mXbvW/d+vbd343suBbpsso0MjFGmxP

Malware Config

Signatures

  • Office macro that triggers on suspicious action 2 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Requests dangerous framework permissions 2 IoCs

Files

  • car-parking-multiplayer-v4.8.16.3-MOD1-gamekillerapp.com.apk
    .apk android arch:arm

    com.olzhas.carparking.multyplayer

    com.google.firebase.MessagingUnityPlayerActivity


  • orig.apk
    .apk android arch:arm

    com.olzhas.carparking.multyplayer

    com.google.firebase.MessagingUnityPlayerActivity


Android Permissions

car-parking-multiplayer-v4.8.16.3-MOD1-gamekillerapp.com.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.BLUETOOTH

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.android.vending.BILLING

com.google.android.gms.permission.AD_ID

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.POST_NOTIFICATIONS

com.olzhas.carparking.multyplayer.permission.C2D_MESSAGE