General

  • Target

    Ymax plus_1.5.7_Apkpure.apk

  • Size

    104.8MB

  • MD5

    b659fcaffd639ab41be3c7d7586b8fca

  • SHA1

    aef935b0b9e6314c5acb5cb557fc36acddd83172

  • SHA256

    27d7dad23996b39395f4c766917c85e4745e33334544fe17e84872bb5d484736

  • SHA512

    17467bdcee51067bdc1feb8877b08e0dbaf1b0e6ded8526c5711fd18321155f82a3c75696aa6d9e08643ce56af4bb1ca6a71e76888b5a488e058e47ddfdcb388

  • SSDEEP

    3145728:m6F3x1JVk58+IxoY911eOnhrT/uMqB9sMD:m6F3x1JVk6zJD4OnFTCpD

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • Ymax plus_1.5.7_Apkpure.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.plus.ymaxmob

    com.plus.ymaxmob.MainActivity


  • 00_musicbrainz.lua
  • 01_googleimage.lua
  • 02_frenchtv.lua
  • 03_lastfm.lua
  • 93048-updates.json
  • 99678-loading.json
  • AssetManifest.json
  • AssetManifest.smcbin
  • FontManifest.json
  • MaterialIcons-Regular.otf
  • NOTICES.Z
    .gz
  • NOTICES.Z
  • Oduda.otf
  • anevia_streams.lua
  • anevia_xml.lua
  • appletrailers.lua
  • baseline.prof
  • bbc_co_uk.lua
  • break.lua
  • common.lua
  • cue.lua
    .ps1
  • dailymotion.lua
  • data_processing.json
  • dkjson.lua
    .js
  • dodeca_and_7channel_3DSL_HRTF.sofa
  • extreme.lua
  • filename.lua
  • france2.lua
  • ink_sparkle.frag
  • jamendo.lua
  • katsomo.lua
  • koreus.lua
  • lelombrik.lua
  • liveleak.lua
  • loading.json
  • long_logo.png
    .png
  • metacafe.lua
  • mpora.lua
  • newgrounds.lua
  • no_internet.json
  • no_sleep.js
    .js
  • pinkbike.lua
  • play_store_512.png
    .png
  • profile.jpg
    .jpg
  • rockbox_fm_presets.lua
    .ps1
  • sandbox.lua
    .js
  • simplexml.lua
  • soundcloud.lua
  • t-rex.css
  • t-rex.html
    .js
  • toastify.css
  • toastify.js
    .js
  • twitch.lua
  • vimeo.lua
  • vocaroo.lua
  • youtube.lua
    .js
  • zapiks.lua

Android Permissions

Ymax plus_1.5.7_Apkpure.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.USE_BIOMETRIC

android.permission.POST_NOTIFICATIONS

android.permission.USE_FINGERPRINT

com.google.android.gms.permission.AD_ID

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.plus.ymaxmob.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION