PatoTeam_FF[.]106[.]x[.]OBB82[.]LITE[.]xapk

Sharing

Copy URL Twitter E-mail

General

Target

PatoTeam_FF.106.x.OBB82.LITE.xapk
Size

464.2MB
MD5

603cc63ac5ba6ad4556d9b41ae99b519
SHA1

7818f09e425bb55f5218d328faa2f35c96e5c272
SHA256

1a6a06a2d3a7c6d43cccdfb7b817864ab14ecc637b418f0b57df7161506fcf03
SHA512

794fb51fff0b7d1f4bb0018ef3824b904aa35212df3334bfd36486e7d64108d2d6f00ae966ba5510ecfeba6e8cc83adc557e5304146c6615ca468abf23e17c60
SSDEEP

12582912:UjKb4VIRDuR0nbNyR+DvTdmzs4CNpG7wOZk0H/+eVDngLtulZm1qm0t:UjY4VIRiunbNy+gYpbG7wOPH/+qnGur1

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

PatoTeam_FF.106.x.OBB82.LITE.xapk
.zip
Android/obb/com.dts.freefireth/main.2019117682.com.dts.freefireth.obb
.jar
com.dts.freefireth.apk
.apk android arch:arm

com.dts.freefireth

com.dts.freefireth.FFMainActivity

Activities

com.dts.freefireth.FFMainActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.linecorp.linesdk.auth.internal.LineAuthenticationCallbackActivity

android.intent.action.VIEW

Permissions

android.permission.POST_NOTIFICATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
com.google.android.gms.permission.AD_ID
android.permission.WAKE_LOCK
com.dts.freefireth.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.BLUETOOTH_CONNECT
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.seagroup.spark.sdk
com.android.vending.BILLING
android.permission.FOREGROUND_SERVICE
android.permission.GET_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_AD_ID
com.dts.freefireth.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.android.vending.CHECK_LICENSE
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.BLUETOOTH
android.permission.VIBRATE

Receivers

com.appsflyer.MultipleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.dts.freefireth.FFBroadcastReceiver

android.intent.action.BOOT_COMPLETED
com.dts.freefireth.action.LOCAL_NOTIFICATION

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

Services

com.ano.gshell.GP6Service

com.ano.gshell.GP6Service

com.dts.freefireth.FFFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.beetalk.sdk.account.AccountAuthenticatorService

android.accounts.AccountAuthenticator
origin.apk
.apk android arch:arm

com.dts.freefireth

com.dts.freefireth.FFMainActivity

Activities

com.dts.freefireth.FFMainActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.linecorp.linesdk.auth.internal.LineAuthenticationCallbackActivity

android.intent.action.VIEW

Permissions

android.permission.POST_NOTIFICATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
com.google.android.gms.permission.AD_ID
android.permission.WAKE_LOCK
com.dts.freefireth.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.BLUETOOTH_CONNECT
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.seagroup.spark.sdk
com.android.vending.BILLING
android.permission.FOREGROUND_SERVICE
android.permission.GET_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_AD_ID
com.dts.freefireth.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.android.vending.CHECK_LICENSE
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.BLUETOOTH
android.permission.VIBRATE

Receivers

com.appsflyer.MultipleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.dts.freefireth.FFBroadcastReceiver

android.intent.action.BOOT_COMPLETED
com.dts.freefireth.action.LOCAL_NOTIFICATION

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

Services

com.ano.gshell.GP6Service

com.ano.gshell.GP6Service

com.dts.freefireth.FFFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.beetalk.sdk.account.AccountAuthenticatorService

android.accounts.AccountAuthenticator
icon.png
.png
manifest.json

Sharing

General

Malware Config

Signatures

Files

com.dts.freefireth

com.dts.freefireth.FFMainActivity

Activities

com.dts.freefireth.FFMainActivity

com.facebook.CustomTabActivity

com.linecorp.linesdk.auth.internal.LineAuthenticationCallbackActivity

Permissions

Receivers

com.appsflyer.MultipleInstallBroadcastReceiver

com.dts.freefireth.FFBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

Services

com.ano.gshell.GP6Service

com.dts.freefireth.FFFirebaseMessagingService

com.beetalk.sdk.account.AccountAuthenticatorService

com.dts.freefireth

com.dts.freefireth.FFMainActivity

Activities

com.dts.freefireth.FFMainActivity

com.facebook.CustomTabActivity

com.linecorp.linesdk.auth.internal.LineAuthenticationCallbackActivity

Permissions

Receivers

com.appsflyer.MultipleInstallBroadcastReceiver

com.dts.freefireth.FFBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

Services

com.ano.gshell.GP6Service

com.dts.freefireth.FFFirebaseMessagingService

com.beetalk.sdk.account.AccountAuthenticatorService