pgs1[.]113[.]0_0[.]275[.]3[.]apk

General

Target

pgs1.113.0_0.275.3.apk
Size

305.9MB
MD5

814e2578d740b14056043c642039a480
SHA1

6a7639660b7a32615e698519644ac2d3697644b8
SHA256

4a7a53196363df3d9a07b248c83fabb822a41ddfcb5d75c4bbcc743219b85439
SHA512

85eeaa6e4ed35437cce3300c1e63ca908403a8da7325a7694277646f42b874374560db653635e0c517d69ecdf6b41417f3ef05fec46688bd38f4850d31cfe39f
SSDEEP

6291456:J9UFkcmZzo5UcLO/ijT/eZRQGPB9XZ1FFDDMhid5a3mwGI:0Wl85ty/iGr/PB9p1FFMiiGI

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Required to be able to advertise to nearby Bluetooth devices.	android.permission.BLUETOOTH_ADVERTISE
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to recognize physical activity.	android.permission.ACTIVITY_RECOGNITION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

pgs1.113.0_0.275.3.apk
.apk android arch:arm64 arch:arm

com.nianticlabs.pokemongo

com.nianticproject.holoholo.libholoholo.unity.UnityMainActivity

Activities

com.nianticproject.holoholo.libholoholo.unity.UnityMainActivity

android.intent.action.MAIN
android.intent.action.VIEW
com.nianticlabs.platform.sharedlogin.LOGINCONTENTPROVIDER
android.intent.action.VIEW
android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW
android.intent.action.VIEW

Permissions

com.android.vending.BILLING
android.permission.VIBRATE
android.permission.BLUETOOTH_SCAN
android.permission.BLUETOOTH_ADVERTISE
android.permission.BLUETOOTH_CONNECT
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.FOREGROUND_SERVICE
android.permission.POST_NOTIFICATIONS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
com.google.android.gms.permission.ACTIVITY_RECOGNITION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.CAMERA
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
android.permission.RECEIVE_BOOT_COMPLETED
com.nianticlabs.pokemongo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.nianticlabs.pokemongo.permission.C2D_MESSAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.ACTIVITY_RECOGNITION
com.nianticlabs.pokemongo.bgcore.util.contentProviderPermission
android.permission.READ_CONTACTS
com.samsung.android.iap.permission.BILLING

Receivers

com.unity.androidnotifications.UnityNotificationRestartOnBootReceiver

android.intent.action.BOOT_COMPLETED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.nianticlabs.background.awareness.AwarenessReceiver

com.nianticlabs.GeofenceTransitionAction
com.nianticlabs.VisitAction

com.nianticlabs.background.awareness.VisitActivityReceiver

com.nianticlabs.DetectedStillActivityAction

com.nianticlabs.background.awareness.VisitDwellFenceReceiver

com.nianticlabs.VisitDwellAction

com.nianticlabs.background.awareness.BootReceiver

android.intent.action.BOOT_COMPLETED

com.nianticlabs.background.sensor.SensorBootReceiver

android.intent.action.BOOT_COMPLETED

com.nianticproject.holoholo.libholoholo.appwidget.EggsWidget

android.appwidget.action.APPWIDGET_UPDATE

com.nianticproject.holoholo.libholoholo.appwidget.BuddyWidget

android.appwidget.action.APPWIDGET_UPDATE

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.cpp.ListenerService

com.google.firebase.MESSAGING_EVENT

com.nianticlabs.pokemongoplus.service.BackgroundService

com.nianticlabs.pokemongoplus.service.ToServer
com.nianticlabs.pokemongoplus.service.BackgroundService

com.nianticproject.holoholo.libholoholo.pushnotifications.NotificationListenerService

com.google.firebase.MESSAGING_EVENT

com.nianticproject.platform.omni.NotificationListenerService

com.google.firebase.MESSAGING_EVENT

Android Permissions

pgs1.113.0_0.275.3.apk

Permissions

com.android.vending.BILLING

android.permission.VIBRATE

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_ADVERTISE

android.permission.BLUETOOTH_CONNECT

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.CAMERA

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

android.permission.RECEIVE_BOOT_COMPLETED

com.nianticlabs.pokemongo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.nianticlabs.pokemongo.permission.C2D_MESSAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACTIVITY_RECOGNITION

com.nianticlabs.pokemongo.bgcore.util.contentProviderPermission

android.permission.READ_CONTACTS

com.samsung.android.iap.permission.BILLING

Resubmissions

Sharing

General

Malware Config

Signatures

Files

com.nianticlabs.pokemongo

com.nianticproject.holoholo.libholoholo.unity.UnityMainActivity

Activities

com.nianticproject.holoholo.libholoholo.unity.UnityMainActivity

com.facebook.CustomTabActivity

Permissions

Receivers

com.unity.androidnotifications.UnityNotificationRestartOnBootReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.nianticlabs.background.awareness.AwarenessReceiver

com.nianticlabs.background.awareness.VisitActivityReceiver

com.nianticlabs.background.awareness.VisitDwellFenceReceiver

com.nianticlabs.background.awareness.BootReceiver

com.nianticlabs.background.sensor.SensorBootReceiver

com.nianticproject.holoholo.libholoholo.appwidget.EggsWidget

com.nianticproject.holoholo.libholoholo.appwidget.BuddyWidget

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.messaging.cpp.ListenerService

com.nianticlabs.pokemongoplus.service.BackgroundService

com.nianticproject.holoholo.libholoholo.pushnotifications.NotificationListenerService

com.nianticproject.platform.omni.NotificationListenerService

Android Permissions

pgs1.113.0_0.275.3.apk