uptodown-com[.]kitkagames[.]fallbuddies[.]apk

General

Target

uptodown-com.kitkagames.fallbuddies.apk
Size

18.5MB
MD5

581596b3d2bc505f14ba9c00eff0f910
SHA1

a414f0464fb59bc6fd5454c04ce7ca2357a4b4f4
SHA256

d62bfac566375971553d1bf260900888c879289de9d9a5315d8a135b82d20908
SHA512

3dd763fc9a4d6388408fc52f84a437c1d824809013a4d0f39c25c19fbc9824e20b46415b9fb086eb31ec2f686e638110800eb230314f60ac831127856cd57fdf
SSDEEP

196608:7r5cGyA8SnrOc3kcBwvkXbpgyEpCCx+ZqDMQxaqBIhwToCZ81CjMBBWgkfWhzy/x:7riGh8QMGGyzCJMQx5cRMMBBdhzyFOiJ

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

Processes:

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

uptodown-com.kitkagames.fallbuddies.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.uptodown

com.uptodown.activities.MainActivity

Activities

com.uptodown.activities.MainActivity

android.intent.action.VIEW
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.uptodown.tv.ui.activity.TvMainActivity

android.intent.action.MAIN

com.uptodown.activities.SearchActivity

android.intent.action.SEARCH

com.stripe.android.link.LinkRedirectHandlerActivity

android.intent.action.VIEW

com.stripe.android.payments.StripeBrowserProxyReturnActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.WAKE_LOCK
android.permission.GET_PACKAGE_SIZE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.USE_CREDENTIALS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.ACCESS_WIFI_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.QUERY_ALL_PACKAGES
android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION
android.permission.POST_NOTIFICATIONS
android.permission.ENFORCE_UPDATE_OWNERSHIP
android.permission.INSTALL_PACKAGES
android.permission.DELETE_PACKAGES
android.permission.ACCESS_SUPERUSER
android.permission.RECORD_AUDIO
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_AD_ID
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.FOREGROUND_SERVICE
com.uptodown.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.uptodown.receivers.BootDeviceReceiver

android.intent.action.BOOT_COMPLETED

com.uptodown.receivers.MyAppUpdatedReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.uptodown.receivers.DownloadNotificationReceiver

CANCEL
PAUSE
RESUME

com.uptodown.receivers.DownloadUpdateNotificationReceiver

CANCEL

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

org.matomo.sdk.extra.InstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

com.uptodown.services.AuthenticatorService

android.accounts.AccountAuthenticator

com.uptodown.gcm.MyFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

uptodown-com.kitkagames.fallbuddies.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

android.permission.GET_PACKAGE_SIZE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.USE_CREDENTIALS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.ACCESS_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES

android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION

android.permission.POST_NOTIFICATIONS

android.permission.ENFORCE_UPDATE_OWNERSHIP

android.permission.INSTALL_PACKAGES

android.permission.DELETE_PACKAGES

android.permission.ACCESS_SUPERUSER

android.permission.RECORD_AUDIO

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.FOREGROUND_SERVICE

com.uptodown.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files

com.uptodown

com.uptodown.activities.MainActivity

Activities

com.uptodown.activities.MainActivity

com.uptodown.tv.ui.activity.TvMainActivity

com.uptodown.activities.SearchActivity

com.stripe.android.link.LinkRedirectHandlerActivity

com.stripe.android.payments.StripeBrowserProxyReturnActivity

Permissions

Receivers

com.uptodown.receivers.BootDeviceReceiver

com.uptodown.receivers.MyAppUpdatedReceiver

com.uptodown.receivers.DownloadNotificationReceiver

com.uptodown.receivers.DownloadUpdateNotificationReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

org.matomo.sdk.extra.InstallReferrerReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

com.uptodown.services.AuthenticatorService

com.uptodown.gcm.MyFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

uptodown-com.kitkagames.fallbuddies.apk