Garena_2[.]4[.]6[.]107_APKPure[.]apk

General

Target

Garena_2.4.6.107_APKPure.apk
Size

19.4MB
MD5

b7c6734c717664081b994730751a24af
SHA1

18c7f4af9f15c12c79136da9c5ab5cdca996e1d3
SHA256

d191309b3064821aa78acdcbd494dfb21cba996f8b001933f86dac2da20dc826
SHA512

627e6a0742c8f9740a326134527a177d8379f65a210a84e988de254416f0c9cca99de7ee99e3b0ee6e8114f2c9dd8058eda308029059354bdb44ca792bfec8d6
SSDEEP

393216:NIqLfbg9zHdaW/oha3jW6JZ41+GdKkSdyVrK2i4LRt8OUqOLoz7ONxFMjsnILWum:NIqLzg9zTqgjnJZ4CyU2d7jnOZMjsnIq

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

Garena_2.4.6.107_APKPure.apk
.apk android arch:arm

com.garena.gaslite

com.garena.gxx.splash.GGSplashActivity

Activities

com.garena.gxx.splash.GGSplashActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.garena.gxx.game.details.GameDetailsActivity_

android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.garena.gameauth.GPProxyCommonActivity

com.garena.gas.intent.GAME_SHARE
com.garena.gas.intent.OPEN_GAS

Permissions

com.android.vending.BILLING
android.permission.INTERNET
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.BROADCAST_STICKY
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.garena.gaslite.permission.CHAT_PROVIDER
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED
android.permission.FOREGROUND_SERVICE
android.permission.WAKE_LOCK
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.c2dm.permission.RECEIVE
android.permission.READ_EXTERNAL_STORAGE

Receivers

com.garena.gxx.base.push.gpns.MessageBroadcastReceiver

com.garena.gxx.gpns.NOTIFICATION_RECEIVE

com.garena.gxx.gpns.logic.AlarmReceiver

com.garena.gxx.gpns.ALARM_ACTION

com.garena.gxx.base.push.gpns.GPNSRebootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.v14.RUN_JOB
net.vrallev.android.job.v14.RUN_JOB

com.evernote.android.job.JobBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED

Services

com.garena.gxx.base.push.fcm.AppFcmListenerService

com.google.firebase.MESSAGING_EVENT

com.garena.gxx.base.push.fcm.AppInstanceIDListenerService

com.google.firebase.INSTANCE_ID_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.evernote.android.job.gcm.PlatformGcmService

com.google.android.gms.gcm.ACTION_TASK_READY

Android Permissions

Garena_2.4.6.107_APKPure.apk

Permissions

com.android.vending.BILLING

android.permission.INTERNET

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BROADCAST_STICKY

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.garena.gaslite.permission.CHAT_PROVIDER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

android.permission.READ_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

Files

com.garena.gaslite

com.garena.gxx.splash.GGSplashActivity

Activities

com.garena.gxx.splash.GGSplashActivity

com.garena.gxx.game.details.GameDetailsActivity_

com.facebook.CustomTabActivity

com.garena.gameauth.GPProxyCommonActivity

Permissions

Receivers

com.garena.gxx.base.push.gpns.MessageBroadcastReceiver

com.garena.gxx.gpns.logic.AlarmReceiver

com.garena.gxx.base.push.gpns.GPNSRebootReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.JobBootReceiver

Services

com.garena.gxx.base.push.fcm.AppFcmListenerService

com.garena.gxx.base.push.fcm.AppInstanceIDListenerService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

com.evernote.android.job.gcm.PlatformGcmService

Android Permissions

Garena_2.4.6.107_APKPure.apk