GLTools[.]apk | Triage

General

Target

GLTools.apk
Size

22.8MB
MD5

8f6f9fe8ee494c98437a11d143a8e67d
SHA1

850e8818929525a5bcf178a322824b56ca7db82a
SHA256

23ac2751dc37f07078dafc79b381ba9e686ed8d18e70719e9a4786b9c38dc5a5
SHA512

d1c8c553518a811bd7b9767d64428a96615c0ff6fb628ef09e95400da61184d7b5c76a1e92e6ecc81a9820e5400b703929101be019ba21cdd7ef3211b9c93a6b
SSDEEP

393216:jSBurJP2vsEKD3LO1HGJxEUD0XQdeayzt6toOWTw/to9EduT2:vJ2Vs0mJFIWeaw8toOWTw/tSZi

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

GLTools.apk
.apk android arch:arm64 arch:arm

com.superpaninbros.glng

com.superpaninbros.glng.ui.MainActivity

Activities

com.superpaninbros.glng.ui.MainActivity

android.intent.action.MAIN
android.intent.action.VIEW

io.presage.mraid.browser.ShortcutActivity

android.intent.action.MAIN

io.presage.mraid.browser.Android8AndLaterShortcutActivity

android.intent.action.MAIN

Permissions

android.permission.QUERY_ALL_PACKAGES
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_SUPERUSER
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

com.vungle.warren.NetworkProviderReceiver

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

com.appodeal.ads.AppodealPackageAddedReceiver

android.intent.action.PACKAGE_ADDED

com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener

android.intent.action.BOOT_COMPLETED

com.ogury.analytics.receiver.UserPresentReceiver

android.intent.action.USER_PRESENT

com.ogury.analytics.receiver.BootCompletedReceiver

android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.BOOT_COMPLETED

com.ogury.analytics.receiver.TimeSetReceiver

android.intent.action.TIME_SET

com.ogury.analytics.receiver.CarrierConfigChangedReceiver

android.telephony.action.CARRIER_CONFIG_CHANGED

com.ogury.analytics.receiver.NextAlarmClockChangedReceiver

android.app.action.NEXT_ALARM_CLOCK_CHANGED

com.ogury.analytics.receiver.EventReminderReceiver

android.intent.action.EVENT_REMINDER

com.ogury.analytics.receiver.BluetoothReceiver

android.bluetooth.device.action.ACL_CONNECTED
android.bluetooth.device.action.ACL_DISCONNECTED
android.hardware.usb.action.USB_ACCESSORY_DETACHED

com.ogury.analytics.receiver.PackageFullyRemovedReceiver

android.intent.action.PACKAGE_FULLY_REMOVED

Services

Android Permissions

GLTools.apk

Permissions

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_SUPERUSER

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Sharing

General

Malware Config

Signatures

Files

com.superpaninbros.glng

com.superpaninbros.glng.ui.MainActivity

Activities

com.superpaninbros.glng.ui.MainActivity

io.presage.mraid.browser.ShortcutActivity

io.presage.mraid.browser.Android8AndLaterShortcutActivity

Permissions

Receivers

com.vungle.warren.NetworkProviderReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

com.appodeal.ads.AppodealPackageAddedReceiver

com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener

com.ogury.analytics.receiver.UserPresentReceiver

com.ogury.analytics.receiver.BootCompletedReceiver

com.ogury.analytics.receiver.TimeSetReceiver

com.ogury.analytics.receiver.CarrierConfigChangedReceiver

com.ogury.analytics.receiver.NextAlarmClockChangedReceiver

com.ogury.analytics.receiver.EventReminderReceiver

com.ogury.analytics.receiver.BluetoothReceiver

com.ogury.analytics.receiver.PackageFullyRemovedReceiver

Services

Android Permissions

GLTools.apk