G8G[.]apk | Triage™

General

Target
G8G.apk
Size 31.5MB
Sample260930-w4wahafb94
SHA256 75b366ba3d52fb8ddab5055523c2b0afaf8679108bb51ca081c990b1c4620fbe
MD5 030265fb388f150c0fe8368574f0f431
SHA1 b9584b943f2625c3a48d7d1e015411f98e286092
SHA512 f46468809895254f3beddd50c955b0cd0b9a41b1ad46c09bd823ab9ee368d3d340ee8712d0b72f2abd5c258e9c6dea025f76cb233253bd152e5848346b0765f5
SSDEEP 786432:Drol0u9aO/aL70wbZvpqk4I9eQ3wZgzaWtA+h8Sw2ilnJpMCsLh4p:QlLlapZxqm3wgBtAsVw2cn/PsLh6
TLSH
T171773393DB396D5BFC209272262B08F2D6211F108453F7AE202A766E7437B950F64BF5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
G8G.apk

File Explorer

G8G.apk

.apk 31.5MB

G8G.apk

SHA256 75b366ba3d52fb8ddab5055523c2b0afaf8679108bb51ca081c990b1c4620fbe
MD5 030265fb388f150c0fe8368574f0f431
SHA1 b9584b943f2625c3a48d7d1e015411f98e286092
SHA512 f46468809895254f3beddd50c955b0cd0b9a41b1ad46c09bd823ab9ee368d3d340ee8712d0b72f2abd5c258e9c6dea025f76cb233253bd152e5848346b0765f5
SSDEEP 786432:Drol0u9aO/aL70wbZvpqk4I9eQ3wZgzaWtA+h8Sw2ilnJpMCsLh4p:QlLlapZxqm3wgBtAsVw2cn/PsLh6
TLSH
T171773393DB396D5BFC209272262B08F2D6211F108453F7AE202A766E7437B950F64BF5
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

12ff0047a372e129602917cda994d0ab09a8532737e5ae77a45b688914b0a9bf

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=white,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=CN

com.ar6012.fb.app

Android Permissions

G8G.apk

Permissions

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.ar6012.fb.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

G8G.apk

File Signature issue

com.example.cpgame.MainActivity

com.example.cpgame.AppRestartActivity

io.flutter.plugins.urllauncher.WebViewActivity

com.google.android.gms.common.api.GoogleApiActivity

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.metadata.ModuleDependencies

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.example.cpgame.notification.FirebaseDataMessageReceiver

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

com.flutter_patcher.flutter_patcher.FlutterPatcherAutoInitProvider

io.flutter.plugins.imagepicker.ImagePickerFileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

G8G.apk

File Signature issue

com.example.cpgame.MainActivity

com.example.cpgame.AppRestartActivity

io.flutter.plugins.urllauncher.WebViewActivity

com.google.android.gms.common.api.GoogleApiActivity

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.metadata.ModuleDependencies

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.example.cpgame.notification.FirebaseDataMessageReceiver

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

com.flutter_patcher.flutter_patcher.FlutterPatcherAutoInitProvider

io.flutter.plugins.imagepicker.ImagePickerFileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

G8G.apk