Overview

overview

7

Static

static

7

signMagisT...TA.apk

android-9-x86

1

IJMDal.data

windows7-x64

3

IJMDal.data

windows10-2004-x64

3

InteGration_4.5.2.ttf

windows7-x64

3

InteGration_4.5.2.ttf

windows10-2004-x64

7

af.bin

windows7-x64

3

af.bin

windows10-2004-x64

3

amazingkids.otf

windows7-x64

3

amazingkids.otf

windows10-2004-x64

7

cacert.pem

windows7-x64

3

cacert.pem

windows10-2004-x64

3

domain_test.json

windows7-x64

3

domain_test.json

windows10-2004-x64

3

gomediad.so

debian-9-armhf

3

httping

debian-9-armhf

icon_max_d...yy.png

windows7-x64

3

icon_max_d...yy.png

windows10-2004-x64

3

icon_titl_...ed.png

windows7-x64

3

icon_titl_...ed.png

windows10-2004-x64

3

ijiami.ajm

windows7-x64

3

ijiami.ajm

windows10-2004-x64

3

ijiami.dat

windows7-x64

3

ijiami.dat

windows10-2004-x64

3

image_icon...ed.png

windows7-x64

3

image_icon...ed.png

windows10-2004-x64

3

routeMap.json

windows7-x64

3

routeMap.json

windows10-2004-x64

3

sign_verify.png

windows7-x64

3

sign_verify.png

windows10-2004-x64

3

signed.bin

windows7-x64

3

signed.bin

windows10-2004-x64

3

test1.html

windows7-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    signMagisTV_APS-ANTA.apk

  • Size

    37.3MB

  • MD5

    e85717e79e5e3abaaaaa7de68ce606bd

  • SHA1

    952d9d39bccd3c0de975aca2d2ec577f8dac9934

  • SHA256

    d52b0c82eab6b1b9fbe02c9df285d8c48ef7b0a6f3977d49c1a7d5458f2d970b

  • SHA512

    025c5a92d1c74858cf95ca0029d60821e5c24ba5662a026cdd64e0657dd12dd0f0457286599f13cb90cc6c883abe61c0ac20aa7cdcd4402059a7f788834afc68

  • SSDEEP

    786432:QBKNfVEquzWq3Ifx5zWq3IfDAMxCrZPxwf0Uf0U47ij8Y1ZFfVgCov:QBuCqqn3e1n3EAMQrU0I0o0

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Files

  • signMagisTV_APS-ANTA.apk
    .apk android arch:arm

    com.android.msandroid

    com.interactive.brasiliptv.ui.activity.WelcomeActivity


  • IJMDal.Data
  • InteGration_4.5.2.ttf
  • af.bin
  • amazingkids.otf
  • cacert.pem
  • domain_test.json
  • gomediad.so
    .elf linux arm
  • httping
    .elf linux arm
  • icon_max_data_encrypted_xxxyyy.png
  • icon_titl_last_encrypted.png
  • ijiami.ajm
  • ijiami.dat
  • image_icon_constructor_encrypted.png
  • routeMap.json
  • sign_verify.png
  • signed.bin
  • test1.html
    .html

Android Permissions

signMagisTV_APS-ANTA.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.WRITE_MEDIA_STORAGE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.HDMI_CEC

android.permission.FORCE_STOP_PACKAGES

android.permission.DELETE_PACKAGES

android.permission.INSTALL_PACKAGES

android.permission.WRITE_SETTINGS

android.permission.CHANGE_CONFIGURATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_TASKS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_PHONE_STATE