General

  • Target

    2xl.apk

  • Size

    54.2MB

  • MD5

    f0c0811a09d35ee304e588dd46eb0112

  • SHA1

    de41bc99fcbfc53d01897abc297f7502aff2223f

  • SHA256

    c4d16cc797de8fbead95051f53ecec00715338f001d97f96df6b5376affcc8c9

  • SHA512

    29b03cfdf361a6aed01a33722165f896fdb86749add45a468ea839f633b4c17fe83b940b3d057a8a0b82bbe680a88c092f8923dbcac2fc80b3f3133ef326d723

  • SSDEEP

    1572864:Q6gGk9qwz6j8ip04O2hHpsi/NSldbj5Usp24KYz2QEYabfrv8HV:Q9GZ/8ihLsi/kjj5UsU4p0/bfrvC

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 4 IoCs

Files

  • 2xl.apk
    .apk android arch:arm

    com.twotimes.largetv.player

    com.purpleplayer.iptv.android.activities.SplashActivity


  • L1.jpg
    .jpg
  • L10.jpg
    .jpg
  • L11.jpg
    .jpg
  • L12.jpg
    .jpg
  • L13.jpg
    .jpg
  • L14.jpg
    .jpg
  • L15.jpg
    .jpg
  • L16.jpg
    .jpg
  • L17.jpg
    .jpg
  • L19.jpg
    .jpg
  • L2.jpg
    .jpg
  • L4.jpg
    .jpg
  • L5.jpg
    .jpg
  • L6.jpg
    .jpg
  • L7.jpg
    .jpg
  • L8.jpg
    .jpg
  • L9.jpg
    .jpg
  • TZDB.dat
  • baseline.prof
  • baseline.profm
  • changelog
  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi
    .elf linux arm
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • nopie_openvpn.mips
    .elf linux mipsel
  • nopie_openvpn.x86
    .elf linux x86
  • nopie_openvpn.x86_64
    .elf linux x64
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi
    .elf linux arm
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.mips
    .elf linux mipsel
  • pie_openvpn.x86
    .elf linux x86
  • pie_openvpn.x86_64
    .elf linux x64
  • world_map.geo.json

Android Permissions

2xl.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_INTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

com.android.vending.BILLING

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SCHEDULE_EXACT_ALARM

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.twotimes.largetv.player.permission.C2D_MESSAGE

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

android.permission.VIBRATE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.USE_CREDENTIALS

com.google.android.gms.permission.AD_ID

com.twotimes.largetv.player.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION