General

  • Target

    Vortexplay_3.0.9.1cxsign.apk

  • Size

    83.6MB

  • MD5

    3a68c3e64289a515f5781b9b414a4822

  • SHA1

    e957fdde23fe52817375d103bd67f97ceff2c35a

  • SHA256

    e239531460c4cc9e67137c4f200d9bdfff1c1066128a34b5a3037a7e31dea27b

  • SHA512

    f42556e56b9366b1f32ea7bccfe266a8eaa580081b1357346d3d52c3d2f25219f5fe82db95f5eb875a69b81ceac14e07c055978f6d67dd8ad2212cc5fd1c60ec

  • SSDEEP

    1572864:jDVytEUGOy3Sn5SBiJsrV1niugE2ufoZ/5l5wcMIoXZoV54aomWioIfougIoL/LS:jQ0Oy3Sn5SMJ6hgE2FZhbpLopoZoFios

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Files

  • Vortexplay_3.0.9.1cxsign.apk
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    apkukrebrands.vortexplay

    xas.streamwire.smarters.view.activity.SplashActivity


  • audience_network.dex
    .dex
  • demo.html
    .html
  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • nopie_openvpn.x86
    .elf linux x86
  • nopie_openvpn.x86_64
    .elf linux x64
  • open_sans.ttf
  • open_sans_regular.ttf
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.x86
    .elf linux x86
  • pie_openvpn.x86_64
    .elf linux x64
  • terms.html
    .html

Android Permissions

Vortexplay_3.0.9.1cxsign.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_OWNER_DATA

android.permission.WRITE_OWNER_DATA

android.permission.CLEAR_APP_CACHE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

apkukrebrands.vortexplay_com.google.android.c2dm.permission.RECEIVE

apkukrebrands.vortexplay_com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE