pgs1[.]158[.]0_0[.]319[.]0_TATOU[.]apk

General

Target

pgs1.158.0_0.319.0_TATOU.apk
Size

333.0MB
MD5

f238ff35f146ebbdfe40ee187f63af89
SHA1

17b20d0972b58adeae3fedab2e0a09275a8a1fd8
SHA256

882eb5c2652a6731282f3e490d4882313c2f08709298a506691831ed4573f544
SHA512

fe65547f128786401448481833d228b96dfa5dc3c1e6dd5c2ef56a690c31079a0e59965da5ff911a6ab62c3b797a8379936ac107ea424e2db65525c6381c6754
SSDEEP

6291456:pklLFjEz1FJHrjVjKlP3rVqDmeJb6xVTDCV8i8OJ9hB2nKWNw6ZAy6/7Z2ZNJMJ:pkMFJHlUT9eJb6TDHi8OHhB2n+/T

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Required to be able to advertise to nearby Bluetooth devices.	android.permission.BLUETOOTH_ADVERTISE
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to recognize physical activity.	android.permission.ACTIVITY_RECOGNITION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

pgs1.158.0_0.319.0_TATOU.apk
.apk android arch:arm64 arch:arm

com.nianticlabs.pokemongo

com.nianticproject.holoholo.libholoholo.unity.UnityMainActivity

Activities

com.nianticproject.holoholo.libholoholo.unity.UnityMainActivity

android.intent.action.MAIN
android.intent.action.VIEW
com.nianticlabs.platform.sharedlogin.LOGINCONTENTPROVIDER
android.intent.action.VIEW
android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW
android.intent.action.VIEW

Permissions

com.android.vending.BILLING
android.permission.VIBRATE
android.permission.BLUETOOTH_SCAN
android.permission.BLUETOOTH_ADVERTISE
android.permission.BLUETOOTH_CONNECT
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.FOREGROUND_SERVICE
android.permission.POST_NOTIFICATIONS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
com.google.android.gms.permission.ACTIVITY_RECOGNITION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.CAMERA
android.hardware.camera.ar
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.RECEIVE_BOOT_COMPLETED
com.nianticlabs.pokemongo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.nianticlabs.pokemongo.permission.C2D_MESSAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.ACTIVITY_RECOGNITION
com.nianticlabs.pokemongo.bgcore.util.contentProviderPermission
com.samsung.android.iap.permission.BILLING
android.permission.READ_CONTACTS

Receivers

com.unity.androidnotifications.UnityNotificationRestartOnBootReceiver

android.intent.action.BOOT_COMPLETED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.nianticlabs.background.awareness.AwarenessReceiver

com.nianticlabs.GeofenceTransitionAction
com.nianticlabs.VisitAction

com.nianticlabs.background.awareness.VisitActivityReceiver

com.nianticlabs.DetectedStillActivityAction

com.nianticlabs.background.awareness.VisitDwellFenceReceiver

com.nianticlabs.VisitDwellAction

com.nianticlabs.background.awareness.BootReceiver

android.intent.action.BOOT_COMPLETED

com.nianticlabs.background.sensor.SensorBootReceiver

android.intent.action.BOOT_COMPLETED

com.nianticproject.holoholo.libholoholo.appwidget.EggsWidget

android.appwidget.action.APPWIDGET_UPDATE

com.nianticproject.holoholo.libholoholo.appwidget.BuddyWidget

android.appwidget.action.APPWIDGET_UPDATE

com.nianticproject.holoholo.libholoholo.appwidget.ActivitySummaryWidget

android.appwidget.action.APPWIDGET_UPDATE

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.cpp.ListenerService

com.google.firebase.MESSAGING_EVENT

com.nianticproject.holoholo.libholoholo.pushnotifications.NotificationListenerService

com.google.firebase.MESSAGING_EVENT

com.nianticlabs.pokemongoplus.service.BackgroundService

com.nianticlabs.pokemongoplus.service.ToServer
com.nianticlabs.pokemongoplus.service.BackgroundService

Android Permissions

pgs1.158.0_0.319.0_TATOU.apk

Permissions

com.android.vending.BILLING

android.permission.VIBRATE

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_ADVERTISE

android.permission.BLUETOOTH_CONNECT

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.CAMERA

android.hardware.camera.ar

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.RECEIVE_BOOT_COMPLETED

com.nianticlabs.pokemongo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.nianticlabs.pokemongo.permission.C2D_MESSAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACTIVITY_RECOGNITION

com.nianticlabs.pokemongo.bgcore.util.contentProviderPermission

com.samsung.android.iap.permission.BILLING

android.permission.READ_CONTACTS

Sharing

General

Malware Config

Signatures

Files

com.nianticlabs.pokemongo

com.nianticproject.holoholo.libholoholo.unity.UnityMainActivity

Activities

com.nianticproject.holoholo.libholoholo.unity.UnityMainActivity

com.facebook.CustomTabActivity

Permissions

Receivers

com.unity.androidnotifications.UnityNotificationRestartOnBootReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.nianticlabs.background.awareness.AwarenessReceiver

com.nianticlabs.background.awareness.VisitActivityReceiver

com.nianticlabs.background.awareness.VisitDwellFenceReceiver

com.nianticlabs.background.awareness.BootReceiver

com.nianticlabs.background.sensor.SensorBootReceiver

com.nianticproject.holoholo.libholoholo.appwidget.EggsWidget

com.nianticproject.holoholo.libholoholo.appwidget.BuddyWidget

com.nianticproject.holoholo.libholoholo.appwidget.ActivitySummaryWidget

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.messaging.cpp.ListenerService

com.nianticproject.holoholo.libholoholo.pushnotifications.NotificationListenerService

com.nianticlabs.pokemongoplus.service.BackgroundService

Android Permissions

pgs1.158.0_0.319.0_TATOU.apk