General

  • Target

    Playmovie5.5.apk

  • Size

    86.9MB

  • MD5

    7ce9eff0b1dce05464959d794e35688e

  • SHA1

    b3cd58376939b4e9f3c16009a749370aeb9829f3

  • SHA256

    fbb6cb53ca0b4559b090fd7057f38c03645a423a14f558209934cc904f9c736b

  • SHA512

    8df2848f558adde726173928976191daa27ff9838094c7ff86c93aad54fab3ce39e441b7eb0094b585d2b83f4809db1f1be231794f31c679eb24db037b3e69a9

  • SSDEEP

    1572864:Fx39qMV+AUo6/e30PFmHb0ZslEkCNqsmZ5Wkw9trkc7QrlLTWl2y:b9NkuWK0YHg6lEkoqnZ1wsc7QpLTWl2y

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Files

  • Playmovie5.5.apk
    .apk android arch:arm arch:x64 arch:x86 arch:arm64 arch:mips arch:mips64

    com.wesoproiptvpro.wesoproiptvproiptvboxvfx

    com.wesoproiptvpro.wesoproiptvproiptvbox.view.activity.SplashActivity


  • audience_network.dex
    .dex
  • demo.html
    .html
  • media.exolist.json
  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • nopie_openvpn.x86
    .elf linux x86
  • nopie_openvpn.x86_64
    .elf linux x64
  • open_sans.ttf
  • open_sans_regular.ttf
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.x86
    .elf linux x86
  • pie_openvpn.x86_64
    .elf linux x64
  • terms.html
    .html

Android Permissions

Playmovie5.5.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_OWNER_DATA

android.permission.WRITE_OWNER_DATA

android.permission.CLEAR_APP_CACHE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE