General

  • Target

    TG[Ban_Baton]BETA KITAY 4.7 3.2.3.apk

  • Size

    864.7MB

  • MD5

    3919c7b16fe9f143de7d2fc7b45c6994

  • SHA1

    d0d51f3708594b79884439b2097088142579a971

  • SHA256

    97535bfad2f537530adb20080024eb3c6e01ee3beedee33fc4274e6e01f91ede

  • SHA512

    c131aa4f0dfc0149a3851a0f08d8a6cb0ba2c4cd17557e50a7ea52aa8d039f617968f866e36eefec90721a22e76ac304bf5f2b893a44d6af50ecd855e45ed4c2

  • SSDEEP

    12582912:O4TBVBanvwu/wRN2NARsFqOGBhqC4QAiX5mEIX0cNAot+S/3hHxBNOeHVU06RdZo:Fkl/osNB8VyQlYE4j6Il/hRBN7yofv

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 13 IoCs

Files

  • TG[Ban_Baton]BETA KITAY 4.7 3.2.3.apk
    .apk android arch:arm

    com.tencent.igce

    com.epicgames.ue4.SplashActivity


  • origin.apk
    .apk android arch:arm

    com.tencent.igce

    com.epicgames.ue4.SplashActivity


Android Permissions

TG[Ban_Baton]BETA KITAY 4.7 3.2.3.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.android.vending.CHECK_LICENSE

android.permission.ACCESS_WIFI_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.FOREGROUND_SERVICE

android.permission.VIBRATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_CONNECT

com.tencent.igce.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

android.permission.POST_NOTIFICATIONS

android.permission.READ_MEDIA_IMAGES

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_MEDIA_VIDEO

com.android.vending.BILLING

android.permission.ACCESS_MEDIA_LOCATION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

com.tencent.igce.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.QUERY_ALL_PACKAGES