base[.]apk | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
base.apk
Size 82.8MB
Sample261030-le3yyaea95
SHA256 e8788a95de9211ae146b41fa93e147d2122f48b8cadc27c03a7dee7ad8531a14
MD5 038efeaabbb16b5da3a39b584b858453
SHA1 30a37e003f564e0368c63683b0176424752acf18
SHA512 510f2bacabd4e9d84ed6acf43f6f4b5c4eefc2b02571cff7656dbb131f98ad4887f2d4764627fa039fa0e4980cd88f5bb1af7179be297886c304713cfbd2ad77
SSDEEP 786432:KCp6zvYLdoYDgD/aoBEl/MZP1/shj0sx2mVIZeZMvmHk39Oa2gek5Mq9asn+:KC6adbknesPJ+j0sx2mVnHCOa2II
TLSH
T184185AA2B3514921D4A976387CFECB00F73E6D8DD6CA3B42100473B8AD6A2F57DA5187
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
base.apk

File Explorer

base.apk

.apk 82.8MB

base.apk

SHA256 e8788a95de9211ae146b41fa93e147d2122f48b8cadc27c03a7dee7ad8531a14
MD5 038efeaabbb16b5da3a39b584b858453
SHA1 30a37e003f564e0368c63683b0176424752acf18
SHA512 510f2bacabd4e9d84ed6acf43f6f4b5c4eefc2b02571cff7656dbb131f98ad4887f2d4764627fa039fa0e4980cd88f5bb1af7179be297886c304713cfbd2ad77
SSDEEP 786432:KCp6zvYLdoYDgD/aoBEl/MZP1/shj0sx2mVIZeZMvmHk39Oa2gek5Mq9asn+:KC6adbknesPJ+j0sx2mVnHCOa2II
TLSH
T184185AA2B3514921D4A976387CFECB00F73E6D8DD6CA3B42100473B8AD6A2F57DA5187
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

1b7b31f23b0e4be9d136e6418d2e0ed60cb838be9d390a9094cc0d5652abab78befebf982ce8b371c37d92506f3bdf53d394cf76a48b4e58892235a498a2c8b3

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US

com.catsbit.oxidesurvivalisland

lj76V4.lIkQd4.v0VrY3.kPwkM3

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.VIEW

com.facebook.unity.FBUnityLoginActivity

com.facebook.unity.FBUnityDialogsActivity

com.facebook.unity.FBUnityGamingServicesFriendFinderActivity

com.facebook.unity.FBUnityAppLinkActivity

com.facebook.unity.FBUnityDeepLinkingActivity

com.facebook.unity.FBUnityGameRequestActivity

lj76V4.sYAws9.ku42z6.aTS0W5

android.intent.action.VIEW

com.applovin.adview.AppLovinFullscreenActivity

com.applovin.adview.AppLovinFullscreenImmersiveActivity

com.applovin.sdk.AppLovinWebViewActivity

com.applovin.mediation.MaxDebuggerActivity

com.applovin.mediation.MaxDebuggerDetailActivity

com.applovin.mediation.MaxDebuggerMultiAdActivity

com.applovin.mediation.MaxDebuggerAdUnitsListActivity

com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity

com.applovin.mediation.MaxDebuggerAdUnitDetailActivity

com.applovin.mediation.MaxDebuggerCmpNetworksListActivity

com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity

com.applovin.mediation.MaxDebuggerTcfInfoListActivity

com.applovin.mediation.MaxDebuggerTcfStringActivity

com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity

com.applovin.mediation.MaxDebuggerTestModeNetworkActivity

com.applovin.mediation.MaxDebuggerUnifiedFlowActivity

com.applovin.mediation.MaxDebuggerWaterfallSegmentsActivity

com.applovin.mediation.MaxDebuggerAxonEventsListActivity

com.applovin.creative.MaxCreativeDebuggerActivity

com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity

lj76V4.xYiKQ7.gDo4T1.g32hJ0.ui.sByOb1

lj76V4.xYiKQ7.gDo4T1.kT4zd8.sF5Cn3.hppwS1

lj76V4.xYiKQ7.gDo4T1.kT4zd8.sF5Cn3.sKFXL4

android.intent.action.VIEW

com.facebook.ads.AudienceNetworkActivity

lj76V4.sVovS0.gJd0G1.kzFqy2.rxRAG2

lj76V4.sVovS0.gJd0G1.kzFqy2.yOiNr5

lj76V4.gl0g31.hZrB58.hpm7A8.rnTfj9.xeIho6.vUP7w4.sF5Cn3.oxE8Y0.rQ1tm4.g8cfa0.cxPjZ1

lj76V4.gl0g31.hZrB58.hpm7A8.rnTfj9.xeIho6.vUP7w4.sF5Cn3.uwfiG0.rAbMf2

lj76V4.gl0g31.hZrB58.hpm7A8.rnTfj9.xeIho6.vUP7w4.sF5Cn3.rsGbU8.nYHMF5

lj76V4.gl0g31.hZrB58.hpm7A8.rnTfj9.xeIho6.vUP7w4.sF5Cn3.lRa8P9.wcR3Q9

com.facebook.FacebookActivity

com.facebook.CustomTabMainActivity

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.google.android.gms.ads.AdActivity

com.google.android.gms.ads.OutOfContextTestingActivity

com.google.android.gms.ads.NotificationHandlerActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.games.bridge.GenericResolutionActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

com.google.android.gms.common.api.GoogleApiActivity

io.wOtrN1.vnyzX5.rWbmE8.h75BW5

io.wOtrN1.kzFqy2.ad.g8cfa0.wOVxT4

io.wOtrN1.kzFqy2.ad.rWbmE8.xm2h57

io.wOtrN1.wOpVJ6.lRa8P9.wcR3Q9

io.wOtrN1.wOpVJ6.uwfiG0.awY7R6.rAbMf2

lj76V4.nfH9M1.jamhO3

lj76V4.nfH9M1.pmc5z9

com.google.android.play.core.hsdp.service.HsdpShimActivity

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.ehbOz0

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.njkMN6

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.uFkmn9

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.knBUP6

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.pS14H3

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.dhvzg5

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.e7b524

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.w7GXz2

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.neeFK5

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.txedr9

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.gds6L4

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.pmfN12

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.zVphO3

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.uhXQ50

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.eOH5F1

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.riio43

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.lD7BV7

lj76V4.zTiGV7.hZrB58.tpk0D3.awY7R6.oxkq19.pI5tp6

com.vungle.ads.internal.ui.VungleActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

lj76V4.b2rBc3.gQxdG6.iS5lP3

lj76V4.x6R4n7.bfw7g1.ietCs1

lj76V4.xYiKQ7.gDo4T1.dqYPq2.awY7R6.lzk9F2

lj76V4.pK6Tl6.hZrB58.xeIho6.wpWQl1

lj76V4.pK6Tl6.hZrB58.xeIho6.tSwJF9

com.theymes.sdk.android.OPEN_NOTIFICATION

com.google.games.bridge.NativeBridgeActivity

lj76V4.rXrby1.tyjPH4.hZrB58.fuZAU5.mXnot2

lj76V4.rXrby1.tyjPH4.hZrB58.fuZAU5.ilhVV5

lj76V4.rXrby1.tyjPH4.hZrB58.fuZAU5.kHPCr0

lj76V4.rXrby1.tyjPH4.hZrB58.fuZAU5.qwVUE1

com.ironsource.sdk.controller.ControllerActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.unity3d.ironsourceads.internal.services.InlineStoreActivity

com.ironsource.mediationsdk.testSuite.TestSuiteActivity

lj76V4.kuLiP7.szX204.rPNYi3.awY7R6.hLqH89

lj76V4.kuLiP7.szX204.awY7R6.nVyxm2

lj76V4.kuLiP7.szX204.tNDne3.ffXai4

lj76V4.kuLiP7.szX204.f4rqO1.cNJhC0.hLqH89

com.google.firebase.messaging.MessageForwardingService

com.applovin.impl.adview.activity.FullscreenAdService

com.applovin.impl.adview.activity.AppRestartDuringAdDetectionService

com.google.android.gms.ads.AdService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.unity3d.ads.adplayer.AdTaskRemovalDetectionService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.sessions.SessionLifecycleService

com.google.android.play.core.assetpacks.AssetPackExtractionService

com.google.android.play.core.assetpacks.ExtractionForegroundService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.firebase.messaging.cpp.ListenerService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.cpp.RegistrationIntentService

lj76V4.sYAws9.ku42z6.pvMmH2

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

androidx.room.MultiInstanceInvalidationService

lj76V4.kuLiP7.szX204.rPNYi3.awY7R6.klwWL7

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.gms.measurement.AppMeasurementReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.unity.androidnotifications.UnityNotificationManager

com.unity.androidnotifications.UnityNotificationRestartReceiver

android.intent.action.BOOT_COMPLETED

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

lj76V4.kuLiP7.szX204.o0cZv6.nBSjT9.vQGyR1.r3jvf4

android.net.conn.CONNECTIVITY_CHANGE

Android Permissions

base.apk

Permissions

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.POST_NOTIFICATIONS

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.VIBRATE

com.android.vending.CHECK_LICENSE

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_TOPICS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.android.vending.BILLING

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.samsung.android.mapsagent.permission.READ_APP_INFO

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE

com.amazon.privacypass.ATTEST

com.catsbit.oxidesurvivalisland.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.catsbit.oxidesurvivalisland.permission.C2D_MESSAGE

android.permission.BLUETOOTH_CONNECT

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.USE_BIOMETRIC

com.catsbit.oxidesurvivalisland.deveventspermission