PvZ2 Reflourished 1[.]4[.]2[.]apk

General

Target
PvZ2 Reflourished 1.4.2.apk
Size 35.1MB
Sample260721-tmd9jscc28
SHA256 72908c142bd23135aa9313f14e20cf7bd14fda1566a26dfc5550bd6759b996df
MD5 4370bed38c391bd74754ece137aea00a
SHA1 f6037ff58e0e67b74fc9e9c5672e1961e95f6faf
SHA512 b56e357f7f5f865e776a48014a74f28a8545ac079cc3fdb61427486a9fd9174c9577705e2df82fd27942a8a43644a495ca91b2a126f42834b5629689cb755d1d
SSDEEP 786432:2AiTCvGcmsuqXGdWaF6b/p60ynyH3LDIXb5FmSYxwLZf5Z4rm:2A8COcmsmdfOY8K5DYdrm
TLSH
T1DC873383F7489D1ED8F7A23246B5862291171E448F139253795CB3BD3FBBAC04994BCA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
PvZ2 Reflourished 1.4.2.apk

File Explorer

PvZ2 Reflourished 1.4.2.apk

.apk 35.1MB

PvZ2 Reflourished 1.4.2.apk

SHA256 72908c142bd23135aa9313f14e20cf7bd14fda1566a26dfc5550bd6759b996df
MD5 4370bed38c391bd74754ece137aea00a
SHA1 f6037ff58e0e67b74fc9e9c5672e1961e95f6faf
SHA512 b56e357f7f5f865e776a48014a74f28a8545ac079cc3fdb61427486a9fd9174c9577705e2df82fd27942a8a43644a495ca91b2a126f42834b5629689cb755d1d
SSDEEP 786432:2AiTCvGcmsuqXGdWaF6b/p60ynyH3LDIXb5FmSYxwLZf5Z4rm:2A8COcmsmdfOY8K5DYdrm
TLSH
T1DC873383F7489D1ED8F7A23246B5862291171E448F139253795CB3BD3FBBAC04994BCA
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

de42c91613721c272a3687a83ec61043ae9852863a3469724d4cabb55c5fb582

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=DT,OU=None,O=None,L=None,ST=None,C=NN

com.ea.game.pvz2_rfl

com.popcap.PvZ2.PvZ2GameActivity

android.intent.action.MAIN android.intent.action.VIEW

com.popcap.pcsp.marketing.ima.GoogleImaActivity

com.ea.nimble.WebView

com.ironsource.sdk.controller.ControllerActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.adcolony.sdk.AdColonyInterstitialActivity

com.adcolony.sdk.AdColonyAdViewActivity

com.google.android.gms.ads.AdActivity

com.applovin.adview.AppLovinInterstitialActivity

com.applovin.adview.AppLovinFullscreenActivity

com.applovin.sdk.AppLovinWebViewActivity

com.facebook.ads.AudienceNetworkActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.vungle.warren.ui.VungleActivity

com.android.billingclient.api.ProxyBillingActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.applovin.mediation.MaxDebuggerActivity

com.applovin.mediation.MaxDebuggerDetailActivity

com.applovin.mediation.MaxDebuggerMultiAdActivity

com.applovin.mediation.MaxDebuggerAdUnitsListActivity

com.applovin.mediation.MaxDebuggerAdUnitDetailActivity

com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity

com.vungle.warren.ui.VungleFlexViewActivity

com.popcap.PvZ2.PvZ2AlarmReceiver

com.ea.nimble.pushtng.NimblePushTNGBroadcastForwarder

com.ea.eadp.pushnotification.FORWARD_AS_ORDERED_BROADCAST

com.popcap.SexyAppFramework.ScheduledNotificationReceiver

com.mobileapptracker.Tracker

com.android.vending.INSTALL_REFERRER

com.ea.nimble.NimbleLocalNotificationReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Android Permissions

PvZ2 Reflourished 1.4.2.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.VIBRATE

com.android.vending.BILLING

com.android.vending.CHECK_LICENSE

android.permission.USE_CREDENTIALS

com.google.android.gms.permission.AD_ID

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

android.permission.FOREGROUND_SERVICE

Sharing

General

Malware Config

Signatures

File Explorer

PvZ2 Reflourished 1.4.2.apk

File Signature issue

com.popcap.PvZ2.PvZ2GameActivity

com.popcap.pcsp.marketing.ima.GoogleImaActivity

com.ea.nimble.WebView

com.ironsource.sdk.controller.ControllerActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.adcolony.sdk.AdColonyInterstitialActivity

com.adcolony.sdk.AdColonyAdViewActivity

com.google.android.gms.ads.AdActivity

com.applovin.adview.AppLovinInterstitialActivity

com.applovin.adview.AppLovinFullscreenActivity

com.applovin.sdk.AppLovinWebViewActivity

com.facebook.ads.AudienceNetworkActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.vungle.warren.ui.VungleActivity

com.android.billingclient.api.ProxyBillingActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.applovin.mediation.MaxDebuggerActivity

com.applovin.mediation.MaxDebuggerDetailActivity

com.applovin.mediation.MaxDebuggerMultiAdActivity

com.applovin.mediation.MaxDebuggerAdUnitsListActivity

com.applovin.mediation.MaxDebuggerAdUnitDetailActivity

com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity

com.vungle.warren.ui.VungleFlexViewActivity

com.popcap.PvZ2.PvZ2DownloaderService

com.ea.nimble.pushtng.NimblePushTNGBroadcastReceiver

com.ea.nimble.pushtng.NimblePushTNGIntentService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.applovin.impl.sdk.utils.AppKilledService

com.applovin.impl.adview.activity.FullscreenAdService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.ads.AdService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.popcap.PvZ2.PvZ2AlarmReceiver

com.ea.nimble.pushtng.NimblePushTNGBroadcastForwarder

com.popcap.SexyAppFramework.ScheduledNotificationReceiver

com.mobileapptracker.Tracker

com.ea.nimble.NimbleLocalNotificationReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.vungle.warren.utility.VungleProvider

com.applovin.sdk.AppLovinInitProvider

com.google.android.gms.ads.MobileAdsInitProvider

com.facebook.ads.AudienceNetworkContentProvider

com.google.firebase.provider.FirebaseInitProvider

com.ironsource.lifecycle.IronsourceLifecycleProvider

androidx.startup.InitializationProvider

Android Permissions

PvZ2 Reflourished 1.4.2.apk