Resubmissions

05/07/2023, 09:09

230705-k4h5dsch8w 7

General

  • Target

    MagisTV v4.21.4-tvbox.luchitoapk.com.apk

  • Size

    33.8MB

  • MD5

    2bdcb96f9e73b4267b94202e927f3b1c

  • SHA1

    8a17f3a207f2b3faf4f6008db90e154d5fd7d311

  • SHA256

    de8542f3fcc654186a5428bb333ba46947b6eb37ba149546382e19609c670fbc

  • SHA512

    115bb90f00cd0fadbb6fdfc816030d59c4b4d0e84149e6e828c5149c00f9b5a6e43b0b8046e1ec7249da3910f18bf08241e29b55cc47571b17c4fe5bc8560f64

  • SSDEEP

    786432:hiJbSlzWq3IfxlzWq3IfDAyxCwZPxW3Oyhp3OyOUiamI7weVgCfg:hiZSxn3exn3EAynrQr9PkIFI

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • MagisTV v4.21.4-tvbox.luchitoapk.com.apk
    .apk android arch:arm

    com.android.msandroid

    com.interactive.brasiliptv.ui.activity.WelcomeActivity


  • IJMDal.Data
  • af.bin
  • amazingkids.otf
  • cacert.pem
  • domain_test.json
  • gomediad.so
    .elf linux arm
  • httping
    .elf linux arm
  • icon_max_data_encrypted_xxxyyy.png
  • icon_titl_last_encrypted.png
  • ijiami.ajm
  • ijiami.dat
  • image_icon_constructor_encrypted.png
  • routeMap.json
  • sign_verify.png
  • signed.bin
  • test1.html
    .html

Android Permissions

MagisTV v4.21.4-tvbox.luchitoapk.com.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_MEDIA_STORAGE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS