my-talking-tom-2-0-2-multi-android[.]apk

General

Target
my-talking-tom-2-0-2-multi-android.apk
Size 15.7MB
Sample261007-3awgqsxtby
SHA256 2b3335edff643b3516d485bfd66670ff1567700577705a9ecd2505a6cf677234
MD5 0f2602c3eeeeac24f59e8084e8ab7909
SHA1 aa4c49fb582b911956317f459b74e07016c1bf64
SHA512 781dfd05de465db9e12de54476f9688fd0efb44cfad13ae0806d1ee1fd1f12f3cd4d017cd885229966d0f9ba776021e20c783994e9c3e4c4553438acb2ea2344
SSDEEP 393216:MFVyHR0HLZp1zOCydXSn4bviYzlxbaeMK6GJrdrnnFYIBZeA8hVN4+oOU:6Yx0HLoC6Xw4TiYRx+eMzydrnxnB8NJE
TLSH
T1EEF6338AF3DDFD12DA77D433C77242A3B5644C545A52E6232205F21C9EF7E948A88EC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
my-talking-tom-2-0-2-multi-android.apk

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
my-talking-tom-2-0-2-multi-android.apk

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
my-talking-tom-2-0-2-multi-android.apk

File Explorer

my-talking-tom-2-0-2-multi-android.apk

.apk 15.7MB

my-talking-tom-2-0-2-multi-android.apk

SHA256 2b3335edff643b3516d485bfd66670ff1567700577705a9ecd2505a6cf677234
MD5 0f2602c3eeeeac24f59e8084e8ab7909
SHA1 aa4c49fb582b911956317f459b74e07016c1bf64
SHA512 781dfd05de465db9e12de54476f9688fd0efb44cfad13ae0806d1ee1fd1f12f3cd4d017cd885229966d0f9ba776021e20c783994e9c3e4c4553438acb2ea2344
SSDEEP 393216:MFVyHR0HLZp1zOCydXSn4bviYzlxbaeMK6GJrdrnnFYIBZeA8hVN4+oOU:6Yx0HLoC6Xw4TiYRx+eMzydrnxnB8NJE
TLSH
T1EEF6338AF3DDFD12DA77D433C77242A3B5644C545A52E6232205F21C9EF7E948A88EC8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

9070781c63f9be5d113ba897140540dd396d01e2

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Marko Stamcar,O=Outfit7 Ltd.,L=Ljubljana,C=SI

Chains

Jan 1, 0001

com.outfit7.mytalkingtomfree

com.outfit7.mytalkingtom.expansionfiles.MTTExpansionFileActivity

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.outfit7.mytalkingtom.MyTalkingTomNativeActivity

android.intent.action.MAIN

com.outfit7.mytalkingtomfree.Main

android.intent.action.MAIN

com.kamcord.android.KamcordActivity

com.kamcord.android.ReplayActivity

com.kamcord.android.WebActivity

com.outfit7.mytalkingtom.activity.Preferences

android.intent.action.MAIN

com.facebook.LoginActivity

com.unity3d.ads.android.view.UnityAdsFullscreenActivity

com.google.android.gms.ads.AdActivity

com.millennialmedia.android.MMAdViewOverlayActivity

com.millennialmedia.android.MMActivity

com.millennialmedia.android.VideoPlayer

com.chartboost.sdk.CBDialogActivity

com.inmobi.androidsdk.IMBrowserActivity

com.sponsorpay.sdk.android.publisher.OfferWallActivity

com.nexage.android.NexageActivity

com.nexage.android.mraid.MraidBrowser

com.flurry.android.FlurryFullscreenTakeoverActivity

com.facebook.ads.InterstitialAdActivity

com.nativex.monetization.activities.InterstitialActivity

com.tapjoy.TJCOffersWebView

com.tapjoy.TapjoyFullScreenAdWebView

com.tapjoy.TapjoyVideoView

com.tapjoy.TJAdUnitView

com.tapjoy.mraid.view.ActionHandler

com.tapjoy.mraid.view.Browser

com.vungle.publisher.FullScreenAdActivity

com.mopub.mobileads.MoPubActivity

com.mopub.mobileads.MraidActivity

com.mopub.mobileads.MraidVideoPlayerActivity

com.mopub.common.MoPubBrowser

Android Permissions

my-talking-tom-2-0-2-multi-android.apk

Permissions

com.android.vending.CHECK_LICENSE

com.android.vending.BILLING

com.outfit7.mytalkingtomfree.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

Sharing

General

Malware Config

Signatures

File Explorer

my-talking-tom-2-0-2-multi-android.apk

File Signature issue

com.outfit7.mytalkingtom.expansionfiles.MTTExpansionFileActivity

com.outfit7.mytalkingtom.MyTalkingTomNativeActivity

com.outfit7.mytalkingtomfree.Main

com.kamcord.android.KamcordActivity

com.kamcord.android.ReplayActivity

com.kamcord.android.WebActivity

com.outfit7.mytalkingtom.activity.Preferences

com.facebook.LoginActivity

com.unity3d.ads.android.view.UnityAdsFullscreenActivity

com.google.android.gms.ads.AdActivity

com.millennialmedia.android.MMAdViewOverlayActivity

com.millennialmedia.android.MMActivity

com.millennialmedia.android.VideoPlayer

com.chartboost.sdk.CBDialogActivity

com.inmobi.androidsdk.IMBrowserActivity

com.sponsorpay.sdk.android.publisher.OfferWallActivity

com.nexage.android.NexageActivity

com.nexage.android.mraid.MraidBrowser

com.flurry.android.FlurryFullscreenTakeoverActivity

com.facebook.ads.InterstitialAdActivity

com.nativex.monetization.activities.InterstitialActivity

com.tapjoy.TJCOffersWebView

com.tapjoy.TapjoyFullScreenAdWebView

com.tapjoy.TapjoyVideoView

com.tapjoy.TJAdUnitView

com.tapjoy.mraid.view.ActionHandler

com.tapjoy.mraid.view.Browser

com.vungle.publisher.FullScreenAdActivity

com.mopub.mobileads.MoPubActivity

com.mopub.mobileads.MraidActivity

com.mopub.mobileads.MraidVideoPlayerActivity

com.mopub.common.MoPubBrowser

com.outfit7.mytalkingtom.expansionfiles.MTTDownloaderService

com.outfit7.funnetworks.push.GcmIntentService

com.bee7.sdk.service.RewardingService

com.kamcord.android.UploadService

com.vungle.publisher.VungleService

com.outfit7.mytalkingtom.expansionfiles.DownloadInterruptedAlarmReceiver

com.outfit7.funnetworks.push.O7GcmBroadcastReceiver

com.outfit7.funnetworks.InstallReferrer

com.bee7.sdk.publisher.RewardReceiver

com.bee7.sdk.service.RewardingServiceReceiver

com.outfit7.unity.reminder.LocalReminder

com.outfit7.unity.reminder.LocalReminderReboot

Android Permissions

my-talking-tom-2-0-2-multi-android.apk