Resubmissions

10-06-2023 19:10

230610-xvfdcsfe96 7

10-06-2023 19:07

230610-xs172sfe87 7

General

  • Target

    signMagisTV_YT-TEIN.apk

  • Size

    33.1MB

  • MD5

    50eb192d957f1c2945b13b3ef38a5337

  • SHA1

    af8c16d33fdabd2c940c8a4f5f3fa8b8bf545832

  • SHA256

    dfcbb052be07bdc322a4075969f480150fa62fe50532f0830ab93ee1dd20cf30

  • SHA512

    5fe55582ab5de5827818d59bc2424ee6c0b3243786678eee15d3371c426a61b160293fee8d39660a0086157d9af539c120233adfe80116b31529a09a758b11a8

  • SSDEEP

    786432:hiJbSuzWq3Ifx5zWq3IfDAyxCwZPxuMIaOeoHb4KbxhltVgCWF:hiZSqn3e1n3EAynruMvO379A

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • signMagisTV_YT-TEIN.apk
    .apk android arch:arm

    com.android.msandroid

    com.interactive.brasiliptv.ui.activity.WelcomeActivity


  • IJMDal.Data
  • InteGration_4.5.2.ttf
  • af.bin
  • amazingkids.otf
  • cacert.pem
  • domain_test.json
  • gomediad.so
    .elf linux arm
  • httping
    .elf linux arm
  • icon_max_data_encrypted_xxxyyy.png
  • icon_titl_last_encrypted.png
  • ijiami.ajm
  • ijiami.dat
  • image_icon_constructor_encrypted.png
  • routeMap.json
  • sign_verify.png
  • signed.bin
  • test1.html
    .html

Android Permissions

signMagisTV_YT-TEIN.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_MEDIA_STORAGE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS