e06033c7-223a-4ec7-96a8-f4fd8e8eb706[.]apk

General

Target
e06033c7-223a-4ec7-96a8-f4fd8e8eb706.apk
Size 963.4MB
Sample260820-3weq4scl8s
SHA256 88e649ce66ef0631bc428bd0f3f2f74465736910c798755e5abbcc68e71a0eea
MD5 d55b1d596141a10c0f28a80f9208abd2
SHA1 c43b8e954307fd8476daa9361d1117d2454dbe03
SHA512 833813c3dc5c3c52434c9a72686a5d0931c7c0f3ec3df89f9d808b86970f3b8b81722bb5725cc60d1cfae2fe51f2e71cf66a8df10d1bf0bc8aede674679fc1ac
SSDEEP 25165824:zFh3RdVOjR5gYwZcce5BqudBvPI5EYG8kFNkk:zFh3RdVOjR5gYwZcceLqudNzYG8Akk
TLSH
T14EA912429647D609C3FBDC7BE3F99325E6232D41E2429499C86CF3397C79228DB46263
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE

Untrusted Codesign Signers 4 IoCs

Codesigned file was signed by an untrusted entity.

resource
e06033c7-223a-4ec7-96a8-f4fd8e8eb706.apk
unpack001/game_module.apk
unpack001/hs
unpack001/pg

File Explorer

e06033c7-223a-4ec7-96a8-f4fd8e8eb706.apk

.apk 963.4MB
game_module.apk

.apk 1.9MB
hs

.apk 2.5MB
pg

.apk 2.3MB

e06033c7-223a-4ec7-96a8-f4fd8e8eb706.apk

SHA256 88e649ce66ef0631bc428bd0f3f2f74465736910c798755e5abbcc68e71a0eea
MD5 d55b1d596141a10c0f28a80f9208abd2
SHA1 c43b8e954307fd8476daa9361d1117d2454dbe03
SHA512 833813c3dc5c3c52434c9a72686a5d0931c7c0f3ec3df89f9d808b86970f3b8b81722bb5725cc60d1cfae2fe51f2e71cf66a8df10d1bf0bc8aede674679fc1ac
SSDEEP 25165824:zFh3RdVOjR5gYwZcce5BqudBvPI5EYG8kFNkk:zFh3RdVOjR5gYwZcceLqudNzYG8Akk
TLSH
T14EA912429647D609C3FBDC7BE3F99325E6232D41E2429499C86CF3397C79228DB46263
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

67c1e935c4b47bab7447fd5e4055711d30554579beadd4e78d044e657ebc8753

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=PMSDK,OU=PMSDK,O=PMSDK,L=PMSDK,ST=PMSDK,C=PMSDK

com.tocaboca.tocalifeworld

game_module.apk

SHA256 f16d5a9f9748b844babb09ab440fca94e6aa5be1c5122216f7a6af28e4975f3f
MD5 d82a0e5a696d652a9fb5872f039047f7
SHA1 b24697f4007f9d182aadad091c7d5351ebd69eb8
SHA512 8efada67fd988193e5decb4bab809200a185712ed55436bfaa6d2a235f3c89ef295ed592c25c480d89187439a11956ec615d1a03e3cda6d0249e4c8a826e9074
SSDEEP 49152:EOZ/ZI4iHIV0zOUOua2LHaZ3mPinIg838kQIYkCWILIUgC:n/e4JVAOUZaKHVanYmQCWAgC
TLSH
T1FD9533E96EBC51DCDC1472F23A1A883D797126BD3D43A20906D9F7B670C0A8F09A45DB
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

960697ded1913ccb1d0c1f44f89e7df1f18006e5b7b1da9ef15eba1f14157791

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=module,OU=module,O=module,L=module,ST=module,C=module

com.pazugames.avatarworld

hs

SHA256 b74d19f409def572dd9503a85776559a68e82b2cd74c1b80cde59ef1d6178387
MD5 97c34ad8127f18ac01abc16ad3f96326
SHA1 feaf9bfbaa70029672153ab0c42b564dd03e531e
SHA512 22d4401de48337fa050f3d2cbd106b82cd1012471e24abfc6e312a8d33953a5a601ff4177f624ca63112efa8e46db778edd7d3fbaafb9b0c71c2ac9c43925dd9
SSDEEP 49152:To/4r9Yu1JnvD1rfKRf3CVJlqyr9eR6bYUov8mt3vgv+bLvDi0J1B0uVv:To/4r9YuLZeRfSVJlqy+6MdvrFC+bLNF
TLSH
T1A1C533FBCB808CE3F311727BF1690115F1BABE95D55166E84CCA538CC409C18B9AB75A
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

e296b39b20e5d795409efc99bfb2f032e4629c1a7cd4c3778987342baa86d837

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=c,OU=cc,O=c,L=c,ST=c,C=c

com.ddmx.staticcheathost

pg

SHA256 774ec78aebe18056b1c42874f0649e5c5751dd71f2db2d32c10923755dd492d7
MD5 388ef2fb870ee662dae64bc4d9392e71
SHA1 60f35b0433be1f08412e6d06e101e1e43471bdf3
SHA512 fdc20fe7cf25412c133c2ec1d20b6afab238fa73212bae0b9f98857c8ada61a89729590d4bf7d6bd3f50b663475d077eb703614636b9a90fe32d4ccf5241a3dc
SSDEEP 49152:79xPZ+JgdQaWIm2+g3BZZ87zoz+OvflYmVAO1JUA:x5cz03BZqYz+O2c9
TLSH
T116B533D5E6ECB78FE03FC036CAB85226D9AC3693998B7A230024425478A38D475FDD5D
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

4998579e17366763245da4ba69f055bb3f126aea64412cff99c75fab94ab89a6

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=c,OU=cc,O=c,L=c,ST=c,C=c

com.ddmx.window.plugin

Android Permissions

e06033c7-223a-4ec7-96a8-f4fd8e8eb706.apk

Permissions

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

com.amazon.device.iap.permission.RECEIVE

com.amazon.identity.permission.GENERIC_IPC

com.android.vending.CHECK_LICENSE

com.tocaboca.LIFE_WORLD_CONNECTIVITY

freemme.permission.msa

com.google.android.gms.permission.AD_ID

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

com.android.vending.BILLING

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.tocaboca.tocalifeworld.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

e06033c7-223a-4ec7-96a8-f4fd8e8eb706.apk

File Signature issue

com.tocaboca.activity.TocaBocaActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.common.api.GoogleApiActivity

com.helpshift.activities.HSMainActivity

com.helpshift.proactive.HSProactiveNotificationActivity

com.helpshift.activities.HSDebugActivity

com.helpshift.unityproxy.activity.UnityDelegateActivity

spacemadness.com.lunarconsole.settings.PluginSettingsActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.me.game.game_mod.MainActivity

com.google.firebase.components.ComponentDiscoveryService

com.google.android.play.core.assetpacks.AssetPackExtractionService

com.efs.sdk.memleaksdk.monitor.UMonitorService

com.google.android.play.core.assetpacks.ExtractionForegroundService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.amazon.device.iap.ResponseReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.unity.androidnotifications.UnityNotificationManager

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

game_module.apk

File Signature issue

com.me.game.game_mod.lib.app.MainActivity

com.me.game.game_mod.lib.app.NextActivity

com.me.game.game_mod.lib.app.PlaymodAuthorizationActivity

hs

File Signature issue

pg

File Signature issue

com.unity3d.player.UnityPlayerActivity

Sharing

General

Malware Config

Signatures

File Explorer

e06033c7-223a-4ec7-96a8-f4fd8e8eb706.apk

File Signature issue

com.tocaboca.activity.TocaBocaActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.common.api.GoogleApiActivity

com.helpshift.activities.HSMainActivity

com.helpshift.proactive.HSProactiveNotificationActivity

com.helpshift.activities.HSDebugActivity

com.helpshift.unityproxy.activity.UnityDelegateActivity

spacemadness.com.lunarconsole.settings.PluginSettingsActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.me.game.game_mod.MainActivity

com.google.firebase.components.ComponentDiscoveryService

com.google.android.play.core.assetpacks.AssetPackExtractionService

com.efs.sdk.memleaksdk.monitor.UMonitorService

com.google.android.play.core.assetpacks.ExtractionForegroundService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.amazon.device.iap.ResponseReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.unity.androidnotifications.UnityNotificationManager

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

game_module.apk

File Signature issue

com.me.game.game_mod.lib.app.MainActivity

com.me.game.game_mod.lib.app.NextActivity

com.me.game.game_mod.lib.app.PlaymodAuthorizationActivity

hs

File Signature issue

pg

File Signature issue

com.unity3d.player.UnityPlayerActivity

Android Permissions

e06033c7-223a-4ec7-96a8-f4fd8e8eb706.apk