BitLife_MayoMods_v32[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
BitLife_MayoMods_v32.apk
Size 293.1MB
Sample261011-qfa2rsvx5q
SHA256 5dc32a259348ee475c1caa6aad25a4d953a77b420638729e2b4b0f7feff89c82
MD5 95f7484b0ecc98f1b01cddc6a4022170
SHA1 0c3b764f1f0911c8dee94b66c5300d4c49c76168
SHA512 7849155acc9bc6653b23f97f20a8ba720e30eed0b679b1b9f4326707da3dde1e22dec1b12133cfe64ec40119dff15468da98fedb85799647af4312504e1ebdd9
SSDEEP 6291456:jTb+beAIw9TwbZEQa62W2eb2thX1V2IzqPPKCLSk9:/ybe6TeNa6db2ZEIzqX9Lz
TLSH
T121E83366C344CE32C3F52279C1772BA622AD4CA96BC796CE5E26723D3CF32E45421365
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
BitLife_MayoMods_v32.apk

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
BitLife_MayoMods_v32.apk

File Explorer

BitLife_MayoMods_v32.apk

.apk 293.1MB

BitLife_MayoMods_v32.apk

SHA256 5dc32a259348ee475c1caa6aad25a4d953a77b420638729e2b4b0f7feff89c82
MD5 95f7484b0ecc98f1b01cddc6a4022170
SHA1 0c3b764f1f0911c8dee94b66c5300d4c49c76168
SHA512 7849155acc9bc6653b23f97f20a8ba720e30eed0b679b1b9f4326707da3dde1e22dec1b12133cfe64ec40119dff15468da98fedb85799647af4312504e1ebdd9
SSDEEP 6291456:jTb+beAIw9TwbZEQa62W2eb2thX1V2IzqPPKCLSk9:/ybe6TeNa6db2ZEIzqX9Lz
TLSH
T121E83366C344CE32C3F52279C1772BA622AD4CA96BC796CE5E26723D3CF32E45421365
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Codesign digest Mismatch

File was altered after it was signed.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

fbfe1ffaf059b32e1f4bad01297fb3f9c41522d819590a8c2cfef09f4def6fd9

Digest Algorithm

sha256

Digest Matches

Not matched

Trusted

Not trusted

Signer

CN=Chance Music Expansion Test

com.candywriter.bitlife

com.chance.bitlifediag.StartupActivity

android.intent.action.MAIN

com.unity3d.player.UnityPlayerActivity

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

io.didomi.sdk.preferences.ctv.TVPreferencesDialogActivity

io.didomi.sdk.notice.ctv.TVNoticeDialogActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.hyprmx.android.sdk.activity.HyprMXOfferViewerActivity

com.hyprmx.android.sdk.activity.HyprMXRequiredInformationActivity

com.hyprmx.android.sdk.activity.HyprMXNoOffersActivity

com.hyprmx.android.sdk.overlay.HyprMXBrowserActivity

com.chartboost.sdk.view.CBImpressionActivity

com.chartboost.sdk.internal.clickthrough.EmbeddedBrowserActivity

com.chartboost.sdk.view.FullscreenAdActivity

com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.templates.renderer.fullscreen.FullscreenWebviewActivity

com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.vast.VastActivity

com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.staticrenderer.StaticAdActivity

com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.mraid.MraidActivity

com.applovin.adview.AppLovinFullscreenActivity

com.applovin.adview.AppLovinFullscreenImmersiveActivity

com.applovin.sdk.AppLovinWebViewActivity

com.applovin.mediation.MaxDebuggerActivity

com.applovin.mediation.MaxDebuggerDetailActivity

com.applovin.mediation.MaxDebuggerMultiAdActivity

com.applovin.mediation.MaxDebuggerAdUnitsListActivity

com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity

com.applovin.mediation.MaxDebuggerAdUnitDetailActivity

com.applovin.mediation.MaxDebuggerCmpNetworksListActivity

com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity

com.applovin.mediation.MaxDebuggerTcfInfoListActivity

com.applovin.mediation.MaxDebuggerTcfStringActivity

com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity

com.applovin.mediation.MaxDebuggerTestModeNetworkActivity

com.applovin.mediation.MaxDebuggerUnifiedFlowActivity

com.applovin.mediation.MaxDebuggerWaterfallSegmentsActivity

com.applovin.creative.MaxCreativeDebuggerActivity

com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity

com.inmobi.ads.rendering.InMobiAdActivity

com.inmobi.ads.rendering.InMobiInAppBrowserActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

com.google.android.gms.common.api.GoogleApiActivity

com.facebook.ads.AudienceNetworkActivity

com.google.android.gms.ads.AdActivity

com.google.android.gms.ads.OutOfContextTestingActivity

com.google.android.gms.ads.NotificationHandlerActivity

io.bidmachine.nativead.view.VideoPlayerActivity

io.bidmachine.rendering.ad.fullscreen.FullScreenActivity

io.bidmachine.rendering.ad.view.ExpandActivity

io.bidmachine.iab.mraid.MraidActivity

io.bidmachine.iab.vast.activity.VastActivity

com.vungle.ads.internal.ui.VungleActivity

com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity

com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity

com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore

com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity

com.fyber.inneractive.sdk.activities.FyberReportAdActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.mbridge.msdk.config.activity.MBRewardVideoActivity

com.mbridge.msdk.activity.MBCommonActivity

com.mbridge.msdk.out.LoadingActivity

com.mbridge.msdk.reward.player.MBRewardVideoActivity

com.ironsource.sdk.controller.ControllerActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.unity3d.ironsourceads.internal.services.InlineStoreActivity

com.ironsource.mediationsdk.testSuite.TestSuiteActivity

net.pubnative.lite.sdk.consent.UserConsentActivity

net.pubnative.lite.sdk.interstitial.activity.MraidInterstitialActivity

net.pubnative.lite.sdk.interstitial.activity.VastInterstitialActivity

net.pubnative.lite.sdk.rewarded.activity.MraidRewardedActivity

net.pubnative.lite.sdk.rewarded.activity.VastRewardedActivity

net.pubnative.lite.sdk.contentinfo.AdFeedbackActivity

net.pubnative.lite.sdk.utils.browser.BrowserActivity

com.yasirkula.unity.NativeShareCustomShareDialogActivity

com.voxelbusters.essentialkit.appshortcuts.AppShortcutRedirectActivity

com.voxelbusters.appshortcuts.OPEN

com.google.games.bridge.NativeBridgeActivity

com.pairip.licensecheck.LicenseActivity

com.chartboost.sdk.internal.video.repository.exoplayer.VideoRepositoryDownloadService

com.google.android.exoplayer.downloadService.action.RESTART

com.applovin.impl.adview.activity.FullscreenAdService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.android.gms.ads.AdService

com.google.firebase.sessions.SessionLifecycleService

com.google.android.play.core.assetpacks.AssetPackExtractionService

com.google.android.play.core.assetpacks.ExtractionForegroundService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.firebase.messaging.cpp.ListenerService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.cpp.RegistrationIntentService

com.google.firebase.messaging.MessageForwardingService

com.gameanalytics.sdk.errorreporter.GameAnalyticsExceptionReportService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.rocketgames.FloatingModMenuService

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.mbridge.msdk.foundation.same.broadcast.NetWorkChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.yasirkula.unity.NativeShareBroadcastListener

com.unity.androidnotifications.UnityNotificationManager

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

BitLife_MayoMods_v32.apk

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

com.google.android.gms.permission.AD_ID

android.permission.READ_PHONE_STATE

com.android.vending.BILLING

com.android.vending.CHECK_LICENSE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

android.permission.ACCESS_ADSERVICES_TOPICS

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

com.samsung.android.mapsagent.permission.READ_APP_INFO

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

com.candywriter.bitlife.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.candywriter.bitlife.permission.C2D_MESSAGE

android.permission.READ_CONTACTS

com.amazon.privacypass.ATTEST