# DressCode Android Malware Finds Apparent Successor in MilkyDoor 

## Appendix

#### TrendLabs Security Intelligence Blog

 Echo Duan and Jason Gu Mobile Threat Response Team

 April 2017


-----

TREND MICRO LEGAL DISCLAIMER

The information provided herein is for general information and educational purposes only. It is not intended and should not be construed to constitute legal advice.
The information contained herein may not be applicable to all situations and may not reflect the most current situation. Nothing contained herein should be relied
on or acted upon without the benefit of legal advice based on the particular facts and circumstances presented and nothing herein should be construed otherwise.
Trend Micro reserves the right to modify the contents of this document at any time without prior notice.

Translations of any material into other languages are intended solely as a convenience. Translation accuracy is not guaranteed nor implied. If any questions arise
related to the accuracy of a translation, please refer to the original language official version of the document. Any discrepancies or differences created in the
translation are not binding and have no legal effect for compliance or enforcement purposes.

Although Trend Micro uses reasonable efforts to include accurate and up-to-date information herein, Trend Micro makes no warranties or representations of any
kind as to its accuracy, currency, or completeness. You agree that access to and use of and reliance on this document and the content thereof is at your own risk.
Trend Micro disclaims all warranties of any kind, express or implied. Neither Trend Micro nor any party involved in creating, producing, or delivering this document
shall be liable for any consequence, loss, or damage, including direct, indirect, special, consequential, loss of business profits, or special damages, whatsoever
arising out of access to, use of, or inability to use, or in connection with the use of this document, or any errors or omissions in the content thereof. Use of this
information constitutes acceptance for use in an “as is” condition.


-----

## Indicators of Compromise (IoCs):

|Hashes (SHA256)|Col2|Col3|
|---|---|---|
|SHA256|Package Name|App Label|
|68edaa65236116d61ad9e463ce61f0fcb6d 6848b9ee6989e8b6302b2fae2451c|com.funnycardgames.sevensfunnyprogame|Sevens Funny Pro Game|
|3e837ebb6c370342cf6973bb999b68ece7 cdd4d533862b1b2e7815dedfed42a5|com.easymakeup.religiousquotes|Religious Quotes|
|7cee27c1d8a3d80dc329521b94a8d2b30a 70e326a1ddbf45e67c77c99716339a|com.beautyhair.refashionclothesguide|Refashion Clothes Guide|
|33a74fa7aaf0ca62b9376175781493ab23b 448810ae1f9d774a331159a7befd1|com.edusoft.kidslearnanimals|Kids Learn Animals|
|2b15a0e2b47125fb3cc9b1c45bb00441eb 26fea0a5e3c27e61e5d95839b4cd6b|com.easymakeup.hairstylesstepbystep|Hairstyles step by step|
|2674cb7ca244c4570b093ea587f12b3ac1 13a1ed96bc8f927d5757a8867dc90a|com.spacedevgame.awesomeblaster|Awesome Blaster|
|e688b728e054747569ea79c694b820ff5aa f05b361eb52614c9ef31a90c5e739|com.edusoft.balloonsforkids|Balloons For Kids|
|5605808515914bdce48df5e59083775218 006792ed96636ae24a251197656573|com.cardfreegame.spodersolitarecardgame|Spider Solitare Card Game|
|fa0813eaa35cc7833ce3367a1d4448f3b2b 0ae7baf454357f4d6b298fd309953|com.hakihamram.popmountainbaloons|Pop Mountain Baloons|
|918e6866abc463359201ffe6988da50bf9d 1b599fe50db9016a7b24816d6c9bb|com.spacedevgame.logicalconnectfour|Logical connect four|
|f342e0e36b506bb28041982894b055627f 578d36d1f072017b27617bbdcd1db2|com.beautyhair.lipmakeupeasybeautystyle|Lip Makeup: Easy Beauty Style|
|402f32df40542368f780cdde0ba64234ee7 68f0eb3a109914d3265f4553644e4|com.gamesforkidsteam.magicdrawforkids|Magic Draw for Kids|
|33284b60589a817364034a18f499fdac0ab c64b4b3ada6681dbb73e2755bf953|com.cardfreegame.solitairefreecardgamenoad|Solitaire Free Card Game No Ad|
|858e2f5cdc3793b45ce2b12d50ffad87acc 1321efabaf80001284ce5401cea52|com.funnycardgames.freecellfunnycardgame|FreeCell Funny Card Game|
|6c671ba40eb9fcba7f23286c557d6dba33b 94f29bea33cc543433ed50282b67c|com.jodogames.batchsolitaire|Batch Solitaire|
|1e10cac396b24a6a44ba4f916abf5d7d2ac 40ac6f3c7828035dae20bbf2bf70d|com.spacedevgame.trawler|Trawler|
|f7d863a7f8da435031260ed605e0bc26c48 9f3a944445e69af2c5cebb44a1e76|com.cardfreegame.klondikesolitaire|Klondike Solitaire|
|afead9da3740e9739764b5bf9336997d5e 50ca87a3b1a541cd0684f6f5c42dae|com.cardfreegame.sevensfreecardgame|Sevens FREE Card Game|
|44f7b0bc2f8d669cd710f8a46b9d47590bc 4faedf9706200504bd48963ed7623|com.jodogames.cardhearts|Card Hearts|
|708aa82a856cf9ed3c4bd942ee068d7580 471efedbca3c4cdd416ffc3042242d|com.berebere.durakpro|Durak PRO|
|700387929334e656b765bdc1addfcbb8d6 e23defd12a7c88c81bb41c5a211cdc|com.devmos.paintmagickaleidoscopefree|Paint magic kaleidoscope free|
|1aee0f5a5f3d8d82638625075df3ecc69d4 a706d5e631a868c8c1078366dec06|com.edusoft.kidslearndraw|Kids Learn Draw|


3


-----

Step by Step

|SHA256|Package Name|App Label|
|---|---|---|
|a89050b32fcea25d88ccc3199957e3dfd55 c57794b2450379c0718a852e13a2f|com.spacedevgame.superblackjackslots|Super BlackJack Slots|
|9fd61a47f9c58864345a2701af2abb95dd3 38ac319bbc259c3fe0298ae9d3121|com.houselab.royalgame|Royal Game|
|5b29dbe4b56305b62c759d271ed5d5ad37 2b57ac8e75c7968224c15e2215951e|com.beautyhair.nailartdesignstepbystep|Nail Art Design Step by Step|
|d6ef9c204cee173c63035337fa311e91d51 8bda3d96e86abd298190caf1728f4|com.houselab.subtlefingers|Fast Furious Fingers|
|9df594cb870926aba87f51ae847da66c70b afbe68daee3820aa5f1b97e4422dd|com.beautyhair.refashionclothesguide|Refashion Clothes Guide|
|b1f70b82aba39865b32d392faba2c3dc9e7 93d7ec082760b6c7627969083e2fb|com.icecreamstudio.fallingicecreamfungames|Falling Ice Cream - Fun Games|
|298b1879ea0c12c7b6a83a99a08ed78094 382e4df0e6f0da212680f171f5fb64|com.beautyhair.lipmakeupeasybeautystyle|Lip Makeup: Easy Beauty Style|
|a2f075787c12101c4bd3256226385bbc98 186baf6fe96b79957e816efcad80b3|com.beautyhair.hairstyleideasguide|Hairstyle Ideas Guide|
|41e6df2547244274791c068e039f1784016 2d7f58b8802c35f0419870f3e9213|com.jodogames.awesometripeacks|Awesome TriPeacks|
|f627bd7195a4b17421ee332185967d491d fb916856fa06474a24f9013db091ba|com.houselab.crazysoundboard|Crazy Soundboard|
|c3665bc25e0a12ceaf2ca6019e27f92b466 53798ec6478faf907fb5cd9fd7475|com.beautyhair.hairstyleideasguide|Hairstyle Ideas Guide|
|dd9e5140aec4adffb7d483dc579295dda06 06da837ebcf6b8fde2696fc856222|com.houselab.thealien|The Alien|
|6d77ac56408ea2739b64d639009ac203e8 0d2b03a12e1fa489cf5c03ecbf5143|com.puzzleappsstudio.starmaniapuzzlegame|Star Mania Puzzle Game|
|2b0e3c24cd15668bc940dd633637d71486 6cf97c32f2bd27f9472c0dc7cae6d4|com.beautyhair.hijabmodernguide|Hijab Modern Guide|
|327904027683ee0a035cdccfbf8036dda63 4e9e10da2b2bfc49d69744a3410fb|com.beautyhair.nailartdesignstepbystep|Nail Art Design Step by Step|
|5f4e638f78e49540ebbfef1b9bff6c20fd142 2ec947b73b139abc95766d925b0|com.voicefotochanger.voicechangerfunnyeffects|Voice Changer: Funny Effects|
|a8315748f30dbcc90a413370a2fc458cc6cf 407851b65abd12a1ea1fd90cf83f|com.devmos.magicdoodledraw|Magic Doodle - Draw|
|07d99ec651c0dab4a9b9bc8b65b2b34f0c 5357450fff90fd0620de0c63460d93|com.puzzlegameapps.candyblockpuzzlefree|Candy Block Puzzle Free|
|3b44b9c9710ca44ea5d71a392c928fc11b a1af7fd1b058c036f4bc67bd87ebf4|com.houselab.animalquiz|Animal Quiz|
|ef17ab1220644830dfdb97744b27a4ee1e 652d51aef787edf02606eb58e97b00|com.jodogames.marineminessweeper|Marine Mines Sweeper|
|27e52da1b523fc7be196d6ff2c998c1ea5df 2e13c46bf10033ac876b6d7e93e6|com.easymakeup.eyemakeupsteps|Eye Makeup Steps|
|ecaa3528d24bac732d1deb6ac8d37d308a cc6e4ccd153738ebee9fa0e54fc7a7|com.icecreamstudio.flyingicecreamgame|Ice Cream Flap|
|a47d4f193e0a476b1beb0c13f60431f60d0 6473d5b1df35bb5ca5050f23a0b05|com.houselab.galacticcortege|Galactic Cortege|
|2eacb3e9b034e617aef507c741d7276e01 d20637650c94fd09272feaaa9f2bca|com.funnycardgames.solitairefunnycardgame|Solitaire Funny Card Game|
|07e70d10939a3a8ad291f07751f162830e 67d3aa7444bd7576f2e9dc086b0642|com.hakihamram.dotsreversi|Dots Reversi|
|c7bc9222907220da1aa75f7124c282ac7f8 438adf1729564fe0e95ea7eb0f205|com.beautyhair.eyebrowsmakeupstepbystep|Eyebrows MakeUp Step by Step|


4


-----

Paint

|SHA256|Package Name|App Label|
|---|---|---|
|d7af8f8e2a59d3f9818afa27f23adef3cc8af 150016661c93816f2020e3d74e6|com.beautyhair.makeupguidestepbystep|MakeUp Guide Step by Step|
|b8d665ccc7050459af03a57bde2547dbf3e 8ab459bc27aa2925eb1a2b73fba58|com.edusoft.mathforkids|Math For Kids|
|8614bfc98c47e92cf16480ea73bac513fec d1f791d9dff0b3e520e2de389a46a|com.edusoft.abc|ABC|
|259ae38ad7b9d8f1617c6b49efa9be1a0ba 2505a9287d91937941e324e85eab7|com.beautyhair.refashionclothesguide|Refashion Clothes Guide|
|bd2a07364bd83d9f53b26b03ad2c91b668 b9db38b736519b4f2e7744fcb01b99|com.beautyhair.nailartdesignstepbystep|Nail Art Design Step by Step|
|87d5c3769c0445d6b9e931db7f514618a9 ad2edce5fae52f7cba6961cf5d4fe0|com.berebere.awesomechess|Awesome Chess|
|9cf39920189bbc838cd8399eb8d23d6ad0 2b18d541da2e6dea3e20947ef46b8e|com.easymakeup.romanticlovepics|Romantic Love Pics|
|02c6764266e8d06345095bbc384594f320 3439fbbf53ff649296a66aa4c6e763|com.beautyhair.lipstickguide|Lipstick Guide|
|6997b7e951e8655acc8390abc83aff35106 386a00a2b801fd46cd8b09690787e|com.beautyhair.lipstickguide|Lipstick Guide|
|7d97c2b6fd9c15b7483db4b1038b1363c8 c0a0b88a8084d09bfcf6054494d7a2|com.decorapps.photoframesbaby|Photo Frames - Baby|
|9bbcb5b2e0571cbebfa2836537bd2d0c29 278a2af7ec69714e7fe24bc5c57a0d|com.devmos.childhoodcoloringbook|Childhood Coloring Book|
|8cb7208a84d47ca9cf18bd275e9d026d6d 672768cf1977ca7996eecb540e08b4|com.devmos.bunnygocoloringbook|Bunny GO - coloring book|
|8f2bd02610cb30d453806d99673ea9776d 4294615a7d51ae04f0e4e8c64f4ae3|com.cardfreegame.sevensfreecardgame|Sevens FREE Card Game|
|7c19d7440e1e44d296d18356372c53b390 38a122635cbfd55b474a3a4177c586|com.jodogames.cardheartshd|Card Hearts HD|
|6360bb65bf33cc227fcf5177484a747b084 2fcd1a7a456b720636fb42f95d942|com.jumbosoft.pokerjumbo|Poker Jumbo|
|31fe7a558cf03c6a1fcbc20dd999f2030da2 a53e01327399aa2150d75468723b|com.berebere.awesome9pool|Awesome 9 Pool|
|473ef4146dbc863650fd739de292997686f de375d143f71fe2b9d445b9074ca5|com.houselab.planetdestroyer|Planet Destroyer|
|3337b12a404015b4a1f6121ab8f4d0b7a9 eed83a7b2e72e13571f426a2e2c1d1|com.puzzlegameapps.unblockpuzzle|Unblock Puzzle|
|7183350ac9667e785cc7e14803b1a489ca 5fb99b5372a472be6ae8121301485a|com.voicefotochanger.voicechangeraudioeffects|Voice Changer [Audio Effects]|
|3c25d68693a13c854e4ed476314bfa5c41 29593d7b48a594483a77bdffa59aa1|com.gamesforkidsteam.kidscoloringbookprincess|Kids Coloring Book Princess|
|b3bc769f3f32c7af38f11d7082fbaf716d92c 5899adb6b2ff227dcdaefb8a09d|com.beautyhair.lipmakeupeasybeautystyle|Lip Makeup: Easy Beauty Style|
|8b61c6c14f921b1f0475091429ea7f47792 2d456612b6912308401fe052679b0|com.beautyhair.hijabmodernguide|Hijab Modern Guide|
|b579dc0bc90b45d92b215d14ad7db7835c 0a6a353aa6d8507bb1d4866ac35f80|com.gamesforkidsteam.magickidsdrawing|Magic Kids Drawing|
|9611dc30a0b7e9e0f81685d3c208bdeabd 819fd0acf980fc873296178e562b61|com.spacedevgame.superminescleaner|Super mines cleaner|
|b10f8f00ac1fa260856a4d73a498c27a6b4 d60ebdc378e6b71e10a68c690d83f|com.devmos.christmaskidspaint|Christmas - Kids Paint|


5


-----

Step by Step

|SHA256|Package Name|App Label|
|---|---|---|
|80983e476374bd8bf8c312a3e8a9a648f9b 6235bae82e493948a124b6f9940cc|com.dragongames.aliensinvasionadventurefree|Aliens Invasion Adventure Free|
|5d686b4db9c43b655fc8a2bbc31a7aa38d a862e1a73b70cc1aca6954d30c6900|com.beautyhair.refashionclothesguide|Refashion Clothes Guide|
|3dfcc176c9215bb11e5761b00a168e8413 b114ccdcec7660e38e4632a455ce4d|com.beautyhair.lipstickguide|Lipstick Guide|
|596b16f9250ff90e93e5380769f58d7d337 3c5a21793c69356b295ab0ec5cc40|com.beautyhair.nailarteasybeautystyle|Nail Art: Easy Beauty Style|
|2ba79a95c9df58cfe8af163b29c9c2bfd673 cfb398398a83709102709408cda3|com.edusoft.balloonsforkids|Balloons For Kids|
|f211c01a64bfc5fca1356f7e0b0b0748a1de 9942a22ebbee26dd4f60c1a9d9c8|com.easymakeup.eyemakeupstepbystep|Eye Makeup Step By Step|
|bac6afe00ba017fe5860f1d84a9c1e2af5d8 6b5353466236f9144a368a4ca137|com.jumbosoft.jumbojewel|Jumbo Jewel|
|2cf7b85bdbcc35fccf24adfe7c7fbd0603545 393f63ff76e626c5f930dfb35a9|com.jodogames.cardpyramidgame|Card Pyramid game|
|75741cc98a6d69c107566addf8edd444e2 ebe000275da36e50fdf7e2c80753e5|com.jodogames.cardwhistgame|Card Whist Game|
|cff8e45d0c83a9b6d10eb37cc8448f82f6cd d99216704f349295947314d0ee05|com.jodogames.funnywordsseeker|Funny words seeker|
|6ec017e0536322695b370f3570f776ce1d5 3e4788ffe99f53785f1d402bcf56b|com.cardfreegame.thebestpokercardgame|The Best Poker Card Game|
|d070c832f2b7a4a6eb8eb3f5a0af9c4f29b7 9bb8dce88fa6b7ee36ae86488bd4|com.jumbosoft.jumbohelloween|Jumbo Helloween|
|38240ed647528ad61ecda9d68ae1d3e125 6fa7776b3ea911606a92f309a50f46|com.beautyhair.lipstickguide|Lipstick Guide|
|aa36fd6c8fdba552ff8882a626c81be5ed0f b895a256cb31460596d986dd4b63|com.beautyhair.eyesmakeupguide|Eyes Makeup Guide|
|fe22247ba4bc4eed4325a3a5f33fee82871 c618f4d36ae506c8323a62afdf47d|com.cardfreegame.spodersolitarecardgame|Spider Solitare Card Game|
|d3591eeae62e31920c69196b6a0cf1b277 ea7b041ba951c85e670f2db9872752|com.beautyhair.hijabmodernguide|Hijab Modern Guide|
|b4af0eb5a0575abfc8e6a133f796e599079 a70600bcf98ad55b041d1b65fbfed|com.cardfreegame.millionairecardgame|Millionaire Card Game|
|ca9f8f2b497e1c8f67e5a471d2e320846db 1ac253cbd29c3572b930ed59ff648|com.beautyhair.eyebrowsmakeupstepbystep|Eyebrows MakeUp Step by Step|
|cef90f5314dba32dc20de67f728cc431faf4 3a6c7603d100e3d13fd348e122da|com.icecreamstudio.frogthrowing|Frog Throwing|
|f39245285d0f86f1c6bd6df1d5fff6c05dde7 7eef0fdabaa148e516694e52140|com.beautyhair.hairstyleideasguide|Hairstyle Ideas Guide|
|6a4fbb3792cfda2dbc1efefcdb5ae262b128 3546214d00ba8fbb926afbd90ad9|com.beautyhair.hairstyleideasguide|Hairstyle Ideas Guide|
|b417b89975e40a88ea2f76cf945e781e7b4 89a5f7053fc000909f42dc1e724d0|com.icecreamstudio.helpthefrog|Help the Frog|
|229d87c540099cc0b895f94d3224ee8e30 0a959dd79d876ae2809821639ff1a9|com.beautyhair.makeupguidestepbystep|MakeUp Guide Step by Step|
|03317a7d537ff6cb58c90687cac31bfd970 e7cc61dfb67f2954e4742293965dd|com.jumbosoft.flyingbirds|Flying Birds|
|2b66bbfe8cba9d6913e4a959173050d0ab 6943b00267f9b076f0f21aa3ac3a07|com.puzzlegameapps.puzzleblockgamefree|Puzzle Block Game Free|
|5700a3a815bce950904d11fe2bd319e49fe 5dda25646e49e8fe4097029a75cf3|com.beautyhair.eyebrowsmakeupstepbystep|Eyebrows MakeUp Step by Step|


6


-----

|SHA256|Package Name|App Label|
|---|---|---|
|e4c9c6d73a6f9eee8af13fa42a122a86a84 11721e3e428a3f85b8b112a094365|com.beautyhair.lipstickguide|Lipstick Guide|
|e4fb111f9c27bce09b339c4ef38f062f2ed3 00c807ccd3c11335e2c1c5f3c81f|com.decorapps.photoframesflowers|Photo Frames - Flowers|
|ca97b9285836cc7c4116cf3b5ed46cf590a bb516663bb86fd3996138cc963a08|com.puzzlegameapps.jewelscandypuzzlegame|Jewels Candy Puzzle Game|
|099ccb786415fc8429df00a2a722a8f91c0 c15d1c8d8177ac3920f5660015122|com.jodogames.schooltictactoe|School TicTacToe|
|028290a3f9161741ee429e2f392ef8606f8 a06f7db0d60e3aec1c0ae1ab6ba46|com.berebere.farklepro|Farkle PRO|
|fd79c70a5c15a864d711e7039a64b842f79 d96dabea62eb10d20bc7640b1e57f|com.cardfreegame.blackjackfreecardgame|BlackJack free card game|
|89a2c751eb17645e589b5b307c562ffeed0 0e02c731f2e14a9616bc39631bcc3|com.beautyhair.eyebrowsmakeupstepbystep|Eyebrows MakeUp Step by Step|
|ed3f1e868b7ad38f203b77561102c5e7847 23e15d479b6fdaf48dc206377f188|com.spacedevgame.catchthejewels|Catch the Jewels|
|c3c0806fb02de07d24725b50f41f22a583a d57c83e836c5b630392eac1a22c6b|com.cardfreegame.solitairefreecardgamenoad|Solitaire Free Card Game No Ad|
|3fecf13d51a0f41409d1f1f245a863a7490b 2beecc0892e945944421fb98a63e|com.cardfreegame.golfsolitaireclassic|Golf Solitaire Classic|
|4283d277b0f5b411eacbf6b4a75dc97043b a2ed5f449c7dc92c3826668b68e50|com.puzzleappsstudio.collectblocksfaster|Collect Blocks Faster|
|461f20993a70d9a6979bc891c4476004d2 4bb29897c2cf1be1908b790c169e76|com.houselab.upanddown|UP and DOWN|
|a4aacf1ac4867cfdf89fe258ac8641dc99ef4 f8dae777bd2e28dc8eece93c75f|com.jodogames.arcanoidbubbleshooter|Arcanoid Bubble Shooter|
|e3e4358d6dae4adddfd4b8f729703fa2235 962c6b8148c2d7304424c1d34f7c8|com.hakihamram.classicsudoku|Classic Sudoku|
|c2e3c468e412ff9e5fe1145adc4fcd09e7d9 32e781d6f13a11836e62884b1696|com.easymakeup.funnyquotesandjokesfree|Funny Quotes and Jokes free|
|4ff79d0c69fd18674c185986cb3235b9c02 cc0db536ff1507bf48d88ab7f399b|com.cardfreegame.speedfreecardgame|Speed FREE Card Game|
|63fbb55f12c05bac612bbfb194b800a5e37 9ed91df31881848e3330e45c52cab|com.jumbosoft.jumboflapper|Jumbo Flapper|
|0b160cd3121b2834c004b68c5b30e94534 54da66665ace3a7e8c272e4692b700|com.funnycardgames.millionairefunnycardgame|Millionaire Funny Card Game|
|a76eb4db10ec330040cdd3b3fec5c3cda2 5b3490ba9a71757187ff17826e5fd6|com.beautyhair.eyesmakeupguide|Eyes Makeup Guide|
|258d6efeb998a7a59ce170d2edf922351c1 a7eee727773a928709d64a0838623|com.jumbosoft.colorstream|Color Stream|
|ddfecb527e3b1c30f7c403f60403f7bad06d 65ccaa5b5343b2158cb960e33742|com.dragongames.aliensinvasionadventurefree|Aliens Invasion Adventure Free|
|f4095620621aada806971924341a6eb81a 9fa8782880186ade15513abb5e3976|com.voicefotochanger.animalfacephotochangerfr ee|Animal Face Photo Changer Free|
|df44bf87918a449a97895283dde674f841d 3bb4e09e46b138067f76c63d60610|com.cardfreegame.klondikesolitaire|Klondike Solitaire|
|ec6cfe69d529599b50bcc8226dc4e1a081 1d87b3ddb29c60b6a54212f8fecb6f|com.tapstudio.slidepuzzleforkidsfree|Slide Puzzle for Kids Free|
|112c0d5cdb55973842347fe17b913d1cb7 cc2e3d46ba4364028eabb70258e878|com.houselab.watchstylist|Watch Stylist|
|cade29c6503f02f703dfa68a357ed198ce2 9e6d34bd26a2170c2b96335c99a0e|com.jumbosoft.jewelfest|Jewel Fest|
|bb086abd0b51b5c88f6e19706038d90137 b9cf622bc9085463a2f0135982ea6e|com.beautyhair.nailartdesignstepbystep|Nail Art Design Step by Step|


7


-----

|SHA256|Package Name|App Label|
|---|---|---|
|724426a471d80f53b23e806e1f0a50fd7a2 6da285a2de27f25171d0a41bb6f31|com.devmos.princesscoloringkidsbook|Princess coloring kids book|
|7229987559e25766aad8e3820d130af6cd 947dd9b17a1c5f98d08113c902ce99|com.funnycardgames.blackjacktrainerpro|BlackJack Trainer Pro|
|3801e8000b09f384ee1d222d62e8f63e40c 216c299834b49d13db88d1ce24fbb|com.funnycardgames.classicgolffunnysolitaire|Classic Golf Funny Solitaire|
|fe92c9b63410a9f73a33e8a7ea520cb59f5 c9004b56f36f124fafda7b0911e43|com.puzzlegameapps.treasurehunter|Treasure Hunter|
|b660054d7055ed1e3e5e74981d636fa59d 76ca7185ff13738442ecf015a0309b|com.cardfreegame.oldmaidcardgame|Old Maid Card Game|
|d8d3e0d82c267f561f7e1b742e2301088bf 5c83b5be5a740ff74bfb54080c8a0|com.jumbosoft.candyshake|Candy Shake|
|3b17ad3ff7e10df5346bf4d0a14c0eae4542 727544db6232fc4c1b620ef86e53|com.jodogames.galacticdefender|Galactic Defender|
|2c891ec4bf813b22fbd504cb6043ebf1d87 958c291214692d9097a9e6e361773|com.beautyhair.hijabmodernguide|Hijab Modern Guide|
|6fe4eee78357c036ca8206d7c234cdd892 e094cf93552fdba6d5217f5b15bb9a|com.cardfreegame.pyramidcardgamefree|Pyramid Card Game FREE|
|29624a214b6c88f8f0f361aa8e6fc893a3c3 232a98aac55eb0daf6b0217a3b20|com.devmos.coloringsweetprincessdoll|Coloring Sweet Princess Doll|
|41d486bebd490137e90e0d5ae46673728f f6b0b854fe04f277fa76698a3bd93a|com.decorapps.photoframeswinter|Photo Frames - Winter|
|64db69a3a833d908693c6d861e1824d737 fc3c22f2a2c652b3dda78f4387ad37|com.beautyhair.lipmakeupeasybeautystyle|Lip Makeup: Easy Beauty Style|
|825fb998f1720be2136582f98862ba44e35 25c51278409aa0e05a29a4d9e8948|com.beautyhair.eyebrowsmakeupstepbystep|Eyebrows MakeUp Step by Step|
|da8991fca1a780c138840895259602cdcd 9a09a3852902ef14879f0332f8ed09|com.berebere.cribbagepro|Cribbage PRO|
|f74e3a179e5a0570bd0351eac8f34f18749 5d66a9ca1a91f9df2269ca4f1f40f|com.edusoft.wordsforkids|Words For Kids|
|9297a81a58e7e0fdecb59aebd32f945953f e2a7998e8ff65ce4783a5f33c809a|com.cardfreegame.scorpionsolitaire|Scorpion Solitaire|
|e8e7134edbf9cd962bac0d25f124dc04f18 ef23fac2fb5e3099a4d4d6cffcace|com.beautyhair.nailartdesignstepbystep|Google Play Services|
|7ed5365c0c40ba9c2902215a2489cd4da8 b8ac3251465898a65b193b33e1efd1|com.hakihamram.p4circlesinrow|4 Circles in row|
|7f15e87679aa7cc1d00036b9174dc6538c 856d761cf494dd13da4cb2db752ac6|com.funnycardgames.pyramidfunnysolitaire|Pyramid Funny Solitaire|
|95099c8202d5f371f87decf97326097e25b e2b64fb23ecfea974d7acff4a5efe|com.jodogames.bigsolitairepack|Big Solitaire pack|
|f81771c4c28e29a6124c85a6ee2340241c 72306cf14ed848d5d95607ef428baa|com.edusoft.mathforkids|Math For Kids|
|2a1f3b24c8e08db75f124ad0cc6e5d3fb9a 5113bb004206d28d2e5429fb3d68f|com.gamesforkidsteam.funsketchbook|Fun Sketch Book|
|c6d4124e66a0067aaf63855e65b0cbb0a1 659cf2f13d081ee8122a048f59d7ac|com.houselab.galacticjunk|Galactic Junk|
|282dbdff2e4b20846febcdf09fc9cb5bada9 60b4aed2875521c2b6a81f5019f2|com.cardfreegame.scorpionsolitaire|Scorpion Solitaire|
|9df703b570ff058b1ea96801edca7ec76e4 ed3452c358ea5fdc968d974fd6ba1|com.puzzleappsstudio.balloonsandbows|Balloons and Bows|
|f677d0820c95be20b06e4b24539ec1d980 6bc74c1cbe3774ecf8fbf6b14434d1|com.edusoft.kidslearnanimals|Kids Learn Animals|


8


-----

|SHA256|Package Name|App Label|
|---|---|---|
|653c266f0c45c6492b139f603836652d3e3 33df0b030d015d2a743f14024f08b|com.houselab.barrierdestroyer|Barrier Destroyer|
|4397bd273be391f469edd0d7bcd7efb22d6 8890faf8f34270f6ccfcefdd388c9|com.puzzlegameapps.brickblockpuzzlegame|Brick Block - Puzzle Game|
|837b8609d5d79595fe88d998047da3cd80 352dc42daf7efa8fe99ce2bf8947ad|com.beautyhair.hairstyleideasguide|Hairstyle Ideas Guide|
|15074d56d1d292ff6f44ba1620848e3cf302 10cb586f2216426726bb654f4df5|com.berebere.classicbantumi|Classic Bantumi|
|efbd136820c5ea44fbf3a072cb768f5a2608 e25a81e4efc80787ff58165450b9|com.beautyhair.hijabmodernguide|Hijab Modern Guide|
|6310d1947fa9bb257e81b218dad2e4bc77 4d2fbfc2d27077a171d7aeebd8a925|com.easymakeup.bestlandscapeswallpapers|Best Landscapes Wallpapers|
|4ef9d1efb05244baf58a2489c6c70828e01 18d18ee7ff1afeeba32d6cc2cf332|com.gamesforkidsteam.funsketchbook|Fun Sketch Book|
|9cd5200553ad56fee238590499be2e1474 af3176f0f5f5c79fa80ea5149217b9|com.houselab.spacehalloween|Space Halloween|
|9106501f3be88f25ecdd30c4d04897a0b0b 43d35c39e352fd82ccbe1e3a63d23|com.gamesforkidsteam.kaleidoscopefunpaint|Kaleidoscope Fun Paint|
|c978cde4e4f364e08902850f85252bd46f2 11d5896ffbfe7d2761a42a55bb47d|com.jodogames.aztecmahjong|Aztec Mahjong|
|02abe91bfc49bb7f5fa2173e75c54148519 a9388df05ff202815fb69e6171a52|com.funnycardgames.scorpionprosolitairegame|Scorpion Pro Solitaire Game|
|1cd3e56f89faa4e60c39095aeae8eb869bf d3b6a2bf90344f4df6df791e653e9|com.houselab.housesolitaire|House Solitaire|
|8fd5d20dae766f07d2bf626bc50f92d5316b b8e1d7f13706b4f20626c38f6f4f|com.beautyhair.nailartdesignstepbystep|Nail Art Design Step by Step|
|4d4a66c3141c6fd51586c9f317978541d3d da90d1ade2e3fff6263ceb7211134|com.icecreamstudio.ballarena|Ball Arena|
|af536ab717ee2f5b22d708219634b8340bc 56213b4428e79344b1aecbe523687|com.devmos.coloringbookforkids|Coloring Book for Kids|
|d4cb53d6c2c19a7a943ad99ab0e249d48a 6b0b2d678a2eef2f78a19dfcd8c835|com.cardfreegame.pyramidcardgamefree|Pyramid Card Game FREE|
|f7226759e96e7ba1ec082bd8cb69cfd3f6c 5d2ffb573240d9fdee952db694ebd|com.houselab.mysteryword|Mystery Word|
|a8d89fa36ae67d0e7fa852181c29decd490 583394c9af9de56f345dc938ba198|com.funnycardgames.klondikefunnysolitaire|Klondike Funny Solitaire|
|352dd2c928eeddcc4ef5f3179f8961b5ef1a 1b7226529653f7860e6b5a713e2c|com.spacedevgame.easymahjong|Easy Mahjong|
|74f1ed39f61f3728e1da9c5efac3500fee54 b5ff759cf53f5e84e2d7d6501dbb|com.icecreamstudio.jumpingpumpkinhalloween|Jumping Pumpkin Halloween|
|a16349f5d64b9aaf820b4b6083a536eea3 a9bc849881a0b0f2c9ad4f08ed981f|com.houselab.spacegalacticwar|Space Galactic War|
|e2236485375d5c7126455b74e4fadd956d 1ee36505757cd6e6ff98216b80ef47|com.easymakeup.courageandpositivephrases|Courage and Positive Phrases|
|e7603d6fb200814a5ba727d25946949233 97c3112300a7a57b70192f3933c4d7|com.tapstudio.jumpingsquarecasualgame|SquareJump|
|72cbb66a2242f23d3599e745d9ecf704f51 48da42d160a0835de6635176d1ff2|com.houselab.awesomeracer|Awesome Racer|
|6e441f74717451368d2e7121fc7aca6e691 d452bec32de2929f0e3a7e1e2d4a2|com.cardfreegame.thebestpokercardgame|The Best Poker Card Game|
|2c8529d97e1cf9a06e13df5951a068d4606 4e645f5f77dcabb6c6dc0ba831a77|com.houselab.mazebattle|Maze Battle|


9


-----

Scary Effects

|SHA256|Package Name|App Label|
|---|---|---|
|17310915be8cd3d3474175af13e95a15b6 67789e36cc361428b4cd2d03b5e8d1|com.beautyhair.refashionclothesguide|Refashion Clothes Guide|
|d3fbfcd33550318582dc0bd370fa507ec17 1352bfb4fee3e538b8644c73d965a|com.edusoft.wordsforkids|Words For Kids|
|b946ffd09bd240704631ec8f62ea87ed7ffe dad7ede55393751c2fcdcda0d694|com.jodogames.memorizesudoku|Memorize Sudoku|
|d85b492ab97f13a7b991fa45c6fac8f35ed3 14cf913eef9ea7600e89b53f1d8d|com.puzzlegameapps.blockpuzzleclassicgame|Block Puzzle Classic Game|
|9f8cc668b184b053ea7275d5a79b9d2136 aeb04bf005ac3924584b66d7306f21|com.cardfreegame.millionairecardgame|Millionaire Card Game|
|75f10931c4cc4082650fb6a845bde1c4838 42110024efc8c61ffa2f2e0dd88b7|com.funnycardgames.speedfunnysolitaire|Speed Funny Solitaire|
|b61840d8c1fb0cbbcd09028a225c03b6a1 892c6f71a9afaaa1cead691ae861a0|com.hakihamram.magneticbubblespop|Magnetic Bubbles Pop|
|472348f6af28522e1542b4e1a6894a110e 70a27d1827e618b88a0d05d4bca85c|com.berebere.mancalapro|Mancala PRO|
|0d58db3c556fa22ebbc8fbcef9c23cfc66b2 91c2d9b222584d924e6916b05e54|com.decorapps.photoframeswedding|Photo Frames - Wedding|
|e510743cbfb4065a427710c3e2c0865043 e776155edba7e0a08454371d17219b|com.cardfreegame.blackjackfreecardgame|BlackJack free card game|
|9e242654c13526838d32f2f1f0b6e0d0013 1bf7652936944e04a94e247f3d44d|com.hakihamram.hakisolitaire|Haki Solitaire|
|9b035fe6d13c9f16838b25cb9d739f986a0 48ed3ce7487c9d3265156692bc18b|com.beautyhair.nailarteasybeautystyle|Nail Art: Easy Beauty Style|
|c1707cd801d0f21d459450ec292c620017 dc656ed9457e4ca2ea85f8e9bc63c8|com.jumbosoft.jumpman|Jump Man|
|18c8bc14c0adba881dbc1b4e914c8831ef 00f326a9cc084fa2476ddad0958b10|com.beautyhair.nailarteasybeautystyle|Nail Art: Easy Beauty Style|
|c3d41550c417c845010bb44e78476eea3e cb97e9576e4ab031080d26b8586e1e|com.cardfreegame.yukonsolitaire|Yukon Solitaire|
|b6592e6d6e4f86a96a02103e9a5f9572d5c 1f1b8ebae1b85c31be48169e760fe|com.jumbosoft.pillfest|Pill Fest|
|e54eea6d0a8fc9d6981776d00da12169ee 8e2a12785ee7ffdb9818f37e5b472a|com.decorapps.photoframesxmas|Photo Frames - Xmas|
|6ba64625f0483732b9c6edb126933ef6e66 0d710b7ea220c3cb31b0a53334fa7|com.solitairecardgames.fotrythievessolitaire|Fotry Thieves Solitaire|
|035f2d8d4b65245c43e8db1912b8782a46 03ce256ff5d5265c394b25d917368a|com.devmos.coloranddrawkidsdoodle|Color and Draw - Kids Doodle|
|45dad7740aed0c8f0b3767de80c17f0f3d0 d24427979444d0d10eca068785f82|com.beautyhair.eyesmakeupguide|Eyes Makeup Guide|
|d3d84cc1dbc128dbc017984aecf49e6418 6283c1dbe81a81b0149fb902c04476|com.beautyhair.makeupguidestepbystep|MakeUp Guide Step by Step|
|2584096133200adb8b9fc389ffc1f8d62ccd 0f932cdd76cc62b2969deb48bda4|com.funnycardgames.pokerprogame|Poker Pro Game|
|ebb8b2794e617867a2e864fef343395b21 6707505f1f36a285427785028ed284|com.easymakeup.braidhairstyles|Braid Hair Styles|
|a4ab18a3366583b9becf423c31b375426d 825cadb30f3b00434b43b77bf3674d|com.dragongames.happybubblepopfree|Happy Bubble Pop Free|
|f2c2d16e0a018537c1ec630f4381179b71b 8f613f4e6adc38b827482826ba1b1|com.cardfreegame.freecellfreecardgame|FreeCell Free Card Game|
|e38358e8aa413ce4c08ad0ef39f08b9b737 85c244ceefeaa0eb4b1b3aff0ba9a|com.voicefotochanger.voicechangerscaryeffects|Voice Changer: Scary Effects|


10


-----

Empire

|SHA256|Package Name|App Label|
|---|---|---|
|394e81e988ac377293a083599351a473db 95f31dfb26ecd92ba7c9ae9a2dbdae|com.edusoft.abc|ABC|
|cbe056fbfff5831d7a76e6f6c724679f752ad 33521be413230b396fda9fce1ec|com.spacedevgame.bubblebricks|Bubble bricks|
|6b5c4b44c999c5ad8eaa97e90cb9f9d359 4110cd32e7bdc50372b69d8ca6f5f3|com.cardfreegame.golfsolitaireclassic|Golf Solitaire Classic|
|7e962e4b7c6645a9a43ec1f9a3cca21167 3d25ec776a5a0a4e68fdf0cc9d7152|com.cardfreegame.oldmaidcardgame|Old Maid Card Game|
|ba2fd2a484ef586fbe2b1727fb3ede08881 d34ca0c249db10a1871fc80d3504d|com.cardfreegame.speedfreecardgame|Speed FREE Card Game|
|6394b87c44d85ab60f37c22b550bbd90d1 61b13591aafc7318a0a90c99c1aa74|com.beautyhair.eyesmakeupguide|Eyes Makeup Guide|
|55dc3888c4ea2c6585c826d3e8c3007a3c 4c16c916da704c2b32ec03eb32860b|com.icecreamstudio.collectsocks|Сollect Socks|
|a4df57b463ed49b133762461d8a0c38828 6a771edbd758dd89a02b8454d23195|com.berebere.classicdomino|Classic Domino|
|c7c906a43869d9e8badbcf7eb0599f91537 f678237ee3b4574ca2ad7a5b0e07a|com.berebere.awesomechess|Awesome Chess|
|5167c0506d6fef4ee62e2cbbce3f0a8f4075 578a820b97392068d337d1434341|com.jodogames.easterdiablomaze|Easter Diablo Maze|
|1ab458cf42694ce22ffe6885233b9d22ff5b 7d54ed22696bca2530e963dd65e7|com.jumbosoft.eastereggs|Easter Eggs|
|64a2f5d5daa73ee2599f5e443fc189c43c8f e06dcacff7e6fc0ac69252d01f94|com.gamesforkidsteam.kidscoloringbookanimals|Kids Coloring Book - Animals|
|151d1d5bb687c38ef1a4283b91de69c6f55 852387f59020ad981007901ad7734|com.berebere.awesomepool|Awesome Pool|
|d57f290d51e13a6267a404510d0d70852b 88512c531abbd43f929208ba35bbbe|com.edusoft.kidspuzzle|Kids Puzzle|
|5bd5fd87f648a671e03a2427eb8380459c5 5d5aadff865895c759f3c07fa2a81|com.beautyhair.makeupguidestepbystep|MakeUp Guide Step by Step|
|2cbeeba1051938b54bd3f0dd9fcb0710db2 7050d661ab95d883a67d6fab37cc5|com.jodogames.collapsebubble|Collapse bubble|
|027f0fd02afe5fb8c0338aaed53525d0c803 6bf1f2f993cdb9e6d45172422c5b|com.jodogames.crazyeightgame|Crazy eight game|
|1348eeb1348e04428e2d71fd0c6e3ed887 bb44a6d3bae7aaf4a8691ce4bad59d|com.voicefotochanger.voicechangerscaryeffects|Voice Changer: Scary Effects|
|f5cb794c0286d89f53fb2d2e97234d41ccff 68cb59735c83ea8b51b12be2f476|com.cardfreegame.freecellfreecardgame|FreeCell Free Card Game|
|8302eed2d3bca60fed357ec14ce06faa01f 1f955a22b2907c6bd12337feb01fc|com.cardfreegame.yukonsolitaire|Yukon Solitaire|
|5cfd17b02aa8c73a7a91156859a091ac41f 901f617bfa2f19aee6f7d6d01c031|com.beautyhair.makeupguidestepbystep|MakeUp Guide Step by Step|
|ee9566bd6152bf37eeec64412f052105ecd bfed609b75fbc87963782ddacfcdb|com.berebere.majongpro|Majong PRO|
|bad97ab103e9487573a15c43aa2bdd8b67 93680dade1c15d949bbac1b29744bf|com.icecreamstudio.happydishes|Happy Dishes|
|078ca43d166659ec1f6dba857bf689dfeb2 64bdd2a7b7cb4a615628b0e04e5f5|com.jumbosoft.jumboslot|Jumbo Slot|
|2ee24a25ec4241f333082b45821d4495e9 304aa9ecdc12758660ebb1180237e6|com.berebere.crystalsshuffle|Crystals Shuffle|
|b867c32b24b49220d93bcab7d738dbc733 52a9fcc7f926f0c397512b0925f6b1|com.spacedevgame.galaxyspaceempire|Galaxy Space Empire|


11


-----

|SHA256|Package Name|App Label|
|---|---|---|
|fb03bd33b8951b3bded2d10a5058ec3930 1479f22d110c8a4341be14c1199163|com.hakihamram.daltoniantictactoe|Daltonian TicTacToe|
|e9801598d27618a1fe6bbcc0e6fc67e5843 e65908d219eb7a2a2e2aad832e84d|com.dragongames.fallingicecreamfree|Ice Cream Drop|
|ab8b1cf33c38a9229215dac57e4d6a56c1 7131df080b743fb183d5ae35fd3dcd|com.jumbosoft.blackjackjumbo|Blackjack Jumbo|
|8ea5638f6a0b6a33f2049a233bed9fc5e78 a3ab8d28933e8275e2e1e533b0ef7|com.easymakeup.jokesquotesforchatfree|Jokes Quotes for Chat free|
|522d6761d38cb3677fcbc226cd7648c9dcb e1273a77f22596a64927297d7a089|com.puzzleappsstudio.sudokupuzzlegame|Sudoku Puzzle Game|
|cf35ab96f14c15bc8d1e86832e4b62280ed 26ef2e18b84edd7ad9a2fc50fe85b|com.beautyhair.nailartdesignstepbystep|Nail Art Design Step by Step|
|84367549cecbe39b92e7c2719428f22b08 5475a16e2840243910338061aeda7e|com.spacedevgame.supertictactoe|Super Tic Tac Toe|


## Command & Control Servers:

##### URL/IP Address

 144[.]76[.]108[.]61

 milkyapps[.]net

 liketolife[.]com

 hgnhpmcpdrjydxk[.]com


12


-----

Trend Micro Incorporated, a global leader in security software, strives to make the
world safe for exchanging digital information. Our innovative solutions for consumers,
businesses and governments provide layered content security to protect information
on mobile devices, endpoints, gateways, servers and the cloud. All of our solutions
are powered by cloud-based global threat intelligence, the Trend Micro™ Smart
Protection Network™, and are supported by over 1,200 threat experts around the
globe. For more information, visit www.trendmicro.com.

©2017 by Trend Micro, Incorporated. All rights reserved. Trend Micro and the Trend
Micro t-ball logo are trademarks or registered trademarks of Trend Micro,
Incorporated. All other product or company names may be trademarks or registered
trademarks of their owners.


10101 N. De Anza Blvd.
Cupertino, CA 95014

U.S. toll free: 1 +800.228.5651
Phone: 1 +408.257.1500
Fax: 1 +408.257.2003


-----