= Android.MagicAd trojan displays ads despite all restrictions - Indicators of compromise

== Samples

=== Android.MagicAd.1

|===
| SHA-1 | Package name | App name

| d7d5c09890d4bd3ca678644c778945d979b91fb1,

 2af7b65368bdc58dc6942d0d593337507c8fd8e2 | com.onetower.defense.idle | One Tower Idle Defense
 | fc8daa12c93552b44becd1d1b6d6aa61b9d59db5 |  com.funbees.pighub | Save My Pig
 | 9bf907a9363429092085b1f8642d8a37f45204d0 |  com.ultimate.highway.racer | Ultimate Highway Drive
 | ed7e19819f1cada348d1b375f72c06e5f9db19ea | 	com.anime.wallpapers.aesthetic | Anime Aesthetic Wallpapers
 | 63b5cc67c41ef291d3cef1220dc4beaefc092cf9 | 	com.simple.pdfviewer.reader.app | PDF Reader
 | 17f77fdea2c6bfaf9919f9e44311df7a058046f8 | 	com.fruit.blender.maker | Fruit Juice Maker
| 3fdcb8fbdd2095937ff6c465cc8e70a36c83171f,

8c819c07ddd6e3d227bfaa9c2887b392f0f40269 |  com.quickcommander.filehome.manager | Quick File Manager
| e6dbdd4a85c530fb35dea442b62be91a648cc0e6 | 	com.gamesland.platform | Games Land
| ceb11520711f66c338211ee5d952f96412c2e500 | 	com.rhythmball.music.runner | Rhythm Ball Run
| aefe81c52a0e3d3b05474a54c20722cd2ab2efbd | 	com.uptwo.cleanup.master | Upper Cleaner
| a121182d035fe9da1017f412159e88af4901e6ce | 	com.heartrate.healthtrack.rate.analyzer | Safe Cleaner
| d30e9ec9d38a0f07c3a11d93e5304161dee79d22,

f901883dabe78889fe3f249f2ecfb7d22e7e07f0 | com.power.cleanup.pro | Power Cleaner
| d78c4ddf621d8bf26781bb76e2d517a266d3e4b4 | 	com.track.app.base | Pac Boy
| e4b8efc2b45becfe448f9ca30632b5fff34aa3b6 | 	com.bp.logandiary.life | Blood Pressure Diary
|===

=== Android.MagicAd.2

|===
| SHA-1 | Package name | App name

| a55269bd6b4d653cdb93eaba0a555257f45c54f9 | 	com.line.protection.puppyrescue | Save My Puppy
| 5f0c8d89d0dcf60bc84d341c7a591f2e26404ae0 | 	com.playall.video4k | All Video Player
| 0297a71aff5688c889a7a3d2ddc0999e35a6ae30 | 	com.paperhub.festivals | Festival Wallpapers 4K
| 12b07cae0c59117f7fd56316a97df083d1ff7b3c | 	com.bloodp.recorder.pressure | Blood Pressure Recorder
| 037ffbd753184707423f8a8b450e294c1b3ed0fa | 	com.pekRacingTraffice.OffroadJeep | Rhythm Ball Master
| 59065414aed1b701935cf177d42212c2b8288dc3,

b5522a108cd1383742010fd56a18355c62f9c2df | com.gamesland.platform | Games Land
| a7ae84fcd7849002ff5d648befb0d0042dc16a01 | 	com.uptwo.cleanup.master | Upper Cleaner
| 66f92d3ace2fc79821c53c46821edc5e842fb7fb | 	com.snakearena.survival | Snake Arena Fight
| 535f41ed7bb4d70b9a21abf3ed31b044234e2ab6 | 	com.ultimate.highway.racer | Ultimate Highway Drive
| 1356d2c58cbae37bffe631102d12c4e376d987b4 | 	com.weathersense.livenow | Live Weather
| 0bc1d37d7da3d0744345b4bcbe56bec20647feb5 | 	com.fruit.blender.maker | Fruit Juice Maker
| c4ae2bc29f27b10f333b552038bb38ea2453a6cc | 	com.anime.wallpapers.aesthetic | Anime Aesthetic Wallpapers
| 90ea28d6ec71b57b7047f2f1923d1541206d0a94 | 	com.bp.bloodpressure.healthtraker | Blood Pressure Monitor
| 6c9add09700fb484a7410c3daeb572c681f74263 | 	com.jump.boy.funplay | Run Poy
| 5dab0daefb9af4cf29978fc335e356f23d8085e5 | 	com.paperhub.festivals | Festival Wallpapers 4K
| 9aa5c578789eb5d9c16172feda19fdc704f5a2d6 | 	com.water.sorting.funpuzzle | Liquid Sort Puzzle
| 5b0d7801cc98b63d026c65471d71bce8f8036cbc | 	com.dogbee.linesaver | Save My Dog
| 160bc21213f8dd3ffda8eb750b3db97158e6ee03 | com.billhub.apps | Zombie Tower Defense
| 67923f253fdee7d1664473b26b8f17542df4a008 | 	com.utility.localweather | Weather Sense
| eb64dab2378187483323737a1be62596115ee591 | 	com.supermax.clenauppro | Super Cleaner
| 0ad16008c9c220511d99bc560c2d1ee63bd649c4 | 	com.pekRacingTraffice.RacerATV | Snake Battle Zone
| 6e99a082ceeea205c6df52253b6a687cb7215b92 | 	com.aerovia.mobile | Weather Forecast Pro
| 2d25bf763c17783803b077f0e762e37e553432f5 | 	com.blockstorm.puzzle.adventure | Block Puzzle Classic
| 8cffa525ca21d6e15acd9fa3304c74ffcc9982a3 | 	com.finaldefense.Undeadman | Fresh Juice Tycoon
| 10c3ab4d92901b230d6111961baef2e81766c84b | 	com.pekRacingTraffice.Offroad | Mahjong Connect Puzzle
| 6c7003894ef229cb84e61a24381dfb3e3f737844 | 	com.shortdrama.watchhigh | Short Flix Box
| f7b318bfee036a52b385adc5f8b9c642bcdfb1a0 | 	com.zombieattack.defense | Zombie Frontline
|===

=== Android.MagicAd.3

|===
| SHA-1 | Package name | App name

| e4ffe92ca873b303ad3a9168b96659dbdafcc35a,

ca6a5c5409d867b3f913c4fae2e0728fcb554a0b | com.chatapp.twig | Help The Duck
| 4b38ef2d693ea224a1db12660e84b5a73272573d,

a76c9c1d12410a1208cf608a1815b4d669548ac0,

30f32e2525cc33f441c3a42cb5bf9bc2864e6063,

0bb09b364066e40eca300c69ff35c5997c47f6d8,

a21d33c08ce444fd9cafef6269421fb8232245a1 | indianbhabhi.livechat.dating | Fruit Juice Maker
| 04d63d4276998340c6c229de871fe1d35f33e29e,

e7fe4986ce691811fe72f7a45362378f98a44c7e,

c4f492b25fcc39481d57a2e97f5e38b596e3db84 | com.mobiledeviceinfo.mobiledeviceinfoapp | Super Manager
| a9f9a14808d044f79fedcd47a8bde4189809f5da | 	com.corepulse.checkapps | EDM Tap Ball
| e5f0ae219a9f216f365c4121f6921ddfd6e95166 | 	com.chaithu.foodorder | Ultra Manager
| 67692d2f73bfa405a8b90761895254f0c3f899f8,

78ada4be490b413ac81b8c833ac23c031e52b648,

d1770d89afeb0d5a793793d9d99b76a16de33697,

baca3ba5527d79a80704cd5b1c1797987b68fa45,

f313f879ccbff89aa956da8d672fb4f7e68ce275,

3908771de9588773b9c8b2d2f3c2371f5485e2dc | com.peacecore.apps | Zombie Defense
| ba77b57d62546bdd6f033fa536e0961d930c425f,

744733839c75123d4456246e5a8120c9e4980766,

8c33a39cab9f0bdd0545536721d72ee2bfbfa237,

49f78717f3c90dc76712d38e0ee27a4cf69bd26f,

1dbb7c0935b33fdab821fac36f2b2471a8cbfa91,

294909980d346aa91ce67d81cf0a724b8cc9fe50,

e656d05fd87249a2268f54963288df55d66b43ae | com.brainularapp.brainular | Prime PDF Editor
| 9b38a5766d2a353d1b9fd31cc0282ea06f06f839,

5e42edce732178a609e7c8842abdc7318a483bea,

cd7e6f05aefe749e7e0c6260aa65d40b8dbc6446,

f1b915c13e9b6fc0a9951f024c8506479bbef92c,

db292ef17ffa3ca592a1ced83c831d9f65ea10d9,

cc99738839b374bc37cb2f658b9ee5312b9615b6,

c5177d30dce476d5c194e9d0e457c85148277d3e | com.ytapp.pythonlife | Safe Cleaner
| ab391d34f610c12076f9f91508d711119aa75b20 | com.weather.reportandforcast | Daily Weather Forcast
| 7c8c9ea5fe6b2c0f8829f56270e9393bf47f48ae | com.mushawara.iq | offroad jeep parking 3d game
|===


=== Android.MagicAd.1.origin
----
d3415f06879c72d76d873b2e260e3cf014f48666
4628098e1a153dd514de5563aeaaec90ba4fba5d
----

=== Android.MagicAd.2.origin
----
2adbbafbdc12bfcfcaab87b104e7e4f600521160
----

=== Android.MagicAd.4
----
86789c9b3a4633e600a53b781f4385de9b389959
----