antidot | 36bf1356f1944a3b834abe304aa2f614[.]apk

General

Target

36bf1356f1944a3b834abe304aa2f614.apk
Size

67.5MB
MD5

c0185e3d91f1b800fd256b670e771659
SHA1

12702426eb6411949221e4771a12760354ef4aee
SHA256

303a4298c92a5c32d6685d5f82a8a4fcabf89ef98785fd881ca00c4cfd509c29
SHA512

c959e82a142a072f20636e69b8adc70baec6cfd26eac2552dde65f976f1aa30c8280ee9fe164e647d51646eac22bf9a09f19a4e049381ef2f85b3be52bf4a934
SSDEEP

1572864:q01LG6wnZUlHVzy1/eCFYX1Xqmo4L+Q5o1AR2P1CuJ:qKLG6wnQHVTC+X1Xqm2JAR2j

Score

10^/10

antidot

Malware Config

Signatures

Antidot family
antidot

Antidot payload 1 IoCs

Processes:

resource	yara_rule
sample	family_antidot

Requests dangerous framework permissions 9 IoCs

Processes:

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

36bf1356f1944a3b834abe304aa2f614.apk
.apk android arch:arm64 arch:arm

com.Yiming.PC

com.me.game.pmupdatesdk.MainActivity

Activities

io.unity.sdk.android.UnityLauncher

android.intent.action.MAIN

com.me.game.pmupdatesdk.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
com.android.vending.BILLING
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_TOPICS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.QUICKBOOT_POWERON
android.permission.USE_EXACT_ALARM
android.permission.POST_NOTIFICATIONS
android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

Receivers

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

io.unity.sdk.android.UnityReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTE
android.intent.action.BATTERY_LOW
android.intent.action.BATTERY_OKAY
android.intent.action.BOOT_COMPLETED
android.intent.category.DEFAULT
android.intent.action.ACTION_BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.REBOOT
android.intent.action.MY_PACKAGE_REPLACED

Services

Android Permissions

36bf1356f1944a3b834abe304aa2f614.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

com.android.vending.BILLING

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_TOPICS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.QUICKBOOT_POWERON

android.permission.USE_EXACT_ALARM

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

Sharing

General

Malware Config

Signatures

Files

com.Yiming.PC

com.me.game.pmupdatesdk.MainActivity

Activities

io.unity.sdk.android.UnityLauncher

com.me.game.pmupdatesdk.MainActivity

Permissions

Receivers

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

io.unity.sdk.android.UnityReceiver

Services

Android Permissions

36bf1356f1944a3b834abe304aa2f614.apk