General

  • Target

    pgs1.158.0_0.319.0_TATOU.apk

  • Size

    333.0MB

  • MD5

    f238ff35f146ebbdfe40ee187f63af89

  • SHA1

    17b20d0972b58adeae3fedab2e0a09275a8a1fd8

  • SHA256

    882eb5c2652a6731282f3e490d4882313c2f08709298a506691831ed4573f544

  • SHA512

    fe65547f128786401448481833d228b96dfa5dc3c1e6dd5c2ef56a690c31079a0e59965da5ff911a6ab62c3b797a8379936ac107ea424e2db65525c6381c6754

  • SSDEEP

    6291456:pklLFjEz1FJHrjVjKlP3rVqDmeJb6xVTDCV8i8OJ9hB2nKWNw6ZAy6/7Z2ZNJMJ:pkMFJHlUT9eJb6TDHi8OHhB2n+/T

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 16 IoCs

Files

  • pgs1.158.0_0.319.0_TATOU.apk
    .apk android arch:arm64 arch:arm

    com.nianticlabs.pokemongo

    com.nianticproject.holoholo.libholoholo.unity.UnityMainActivity


Android Permissions

pgs1.158.0_0.319.0_TATOU.apk

Permissions

com.android.vending.BILLING

android.permission.VIBRATE

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_ADVERTISE

android.permission.BLUETOOTH_CONNECT

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.CAMERA

android.hardware.camera.ar

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.RECEIVE_BOOT_COMPLETED

com.nianticlabs.pokemongo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.nianticlabs.pokemongo.permission.C2D_MESSAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACTIVITY_RECOGNITION

com.nianticlabs.pokemongo.bgcore.util.contentProviderPermission

com.samsung.android.iap.permission.BILLING

android.permission.READ_CONTACTS