Overview

overview

7

Static

static

7

teleLatino_TVNDW.apk

android-9-x86

1

gomediad.so

debian-9-armhf

3

httping

debian-9-armhf

test1.html

windows7-x64

1

test1.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    teleLatino_TVNDW.apk

  • Size

    32.7MB

  • MD5

    a21a10b680db97a22bf1c4b9638df4b2

  • SHA1

    2df5db87b055dec982b3ed8c2bf521471e7378e4

  • SHA256

    16243163f155e12ffebdaae56ac48686cfd5859f1831180a1d256ab359f2a779

  • SHA512

    60c246d0b3c75436d5bbd11806ab7ad1bf5446a7d979988dd76ad6e53e43539832ed5e620b3a925a4f27c43c2e730ddf07fa15b5496c6cb0253892e25e9e2ce8

  • SSDEEP

    786432:qiJbXuzWq3Ifx5zWq3IfDASvM5nra3pmaOWN5EkSAHj4RxEff5UkTR:qiZXqn3e1n3EASOrwtOiXAGD

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • teleLatino_TVNDW.apk
    .apk android arch:arm

    com.global.latinotvod

    com.interactive.brasiliptv.ui.activity.WelcomeActivity


  • IJMDal.Data
  • InteGration_4.5.2.ttf
  • af.bin
  • amazingkids.otf
  • cacert.pem
  • domain_test.json
  • gomediad.so
    .elf linux arm
  • httping
    .elf linux arm
  • icon_max_data_encrypted_xxxyyy.png
  • icon_titl_last_encrypted.png
  • ijiami.ajm
  • ijiami.dat
  • image_icon_constructor_encrypted.png
  • sign_verify.png
  • signed.bin
  • test1.html
    .html

Android Permissions

teleLatino_TVNDW.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_MEDIA_STORAGE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS