Among_Us_Caxtor_Mods[.]apk

General

Target
Among_Us_Caxtor_Mods.apk
Size 1014.2MB
Sample260815-hhpc6sed92
SHA256 53e821cb763d0680c56b5ea2dd644d1cd7ac3d97a2c17e95de2fb176ca8be517
MD5 b0f8407974fc0c48c36565548fb114bf
SHA1 8d97129ad384235fe5f1e05fecf9379a8f521f36
SHA512 21d7ec2d2de0f9ffb30b70f7a8894741f79efbe76654d2e4af74ff3e7ffd523e95e98fb4ac9d5076d7d6a2ee744d8790bc3cfb89cec43c8a183e068c0aa5b083
SSDEEP 25165824:Ppug4QJCP8jaqWtD66R4WH2aTG4uXmgO+/F43LNIXMZYQ2Bna:Ppug4QJCP8jX066R4WH2aTGVXmgO+/FS
TLSH
T1C8B9CF6A7105D15FC9980F31ACF6EA7C3A6EFC89DE65621737D47F2F26BE600650A200
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Among_Us_Caxtor_Mods.apk

File Explorer

Among_Us_Caxtor_Mods.apk

.apk 1014.2MB

Among_Us_Caxtor_Mods.apk

SHA256 53e821cb763d0680c56b5ea2dd644d1cd7ac3d97a2c17e95de2fb176ca8be517
MD5 b0f8407974fc0c48c36565548fb114bf
SHA1 8d97129ad384235fe5f1e05fecf9379a8f521f36
SHA512 21d7ec2d2de0f9ffb30b70f7a8894741f79efbe76654d2e4af74ff3e7ffd523e95e98fb4ac9d5076d7d6a2ee744d8790bc3cfb89cec43c8a183e068c0aa5b083
SSDEEP 25165824:Ppug4QJCP8jaqWtD66R4WH2aTG4uXmgO+/F43LNIXMZYQ2Bna:Ppug4QJCP8jX066R4WH2aTGVXmgO+/FS
TLSH
T1C8B9CF6A7105D15FC9980F31ACF6EA7C3A6EFC89DE65621737D47F2F26BE600650A200
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

MKGAMER

File Signature issue

Digest

f8c4eadd38936318f242f8993c3068ad66ec285d46e6697db9bf19cf7cbb3762

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.innersloth.spacemafia

Android Permissions

Among_Us_Caxtor_Mods.apk

Permissions

android.permission.CHANGE_WIFI_MULTICAST_STATE

com.google.android.gms.permission.AD_ID

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_ADSERVICES_TOPICS

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

com.android.vending.BILLING

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

com.innersloth.spacemafia.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

Among_Us_Caxtor_Mods.apk

File Signature issue

com.google.games.bridge.NativeBridgeActivity

com.innersloth.spacemafia.EosUnityPlayerActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.games.bridge.GenericResolutionActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.ironsource.sdk.controller.ControllerActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.ironsource.mediationsdk.testSuite.TestSuiteActivity

com.epicgames.mobile.eossdk.EOSAuthHandlerActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.google.android.play.core.assetpacks.AssetPackExtractionService

com.google.android.play.core.assetpacks.ExtractionForegroundService

com.google.android.gms.auth.api.signin.RevocationBoundService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

androidx.room.MultiInstanceInvalidationService

mk.mods.Launcher

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.startup.InitializationProvider

com.ironsource.lifecycle.IronsourceLifecycleProvider

com.ironsource.lifecycle.LevelPlayActivityLifecycleProvider

io.sentry.android.core.SentryInitProvider

io.sentry.android.core.SentryPerformanceProvider

Android Permissions

Among_Us_Caxtor_Mods.apk