Overview

overview

7

Static

static

7

signMagisT...AL.apk

android-9-x86

1

gomediad.so

debian-9-armhf

3

httping

debian-9-armhf

test1.html

windows7-x64

1

test1.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    signMagisTV_TM-MAAL.apk

  • Size

    35.9MB

  • MD5

    b21e52750b9c2a466ac168c6ca2301c1

  • SHA1

    da5404860d0f6fa27e92ffd4fa720a038ba3e2b2

  • SHA256

    67c1bc840f2b9533f806e1938e66d0617d48a6e7f5d5ad06f215364b285a0e0d

  • SHA512

    acd5f2bc49b7a1ef72f73bb820df0e0f8521216052a661dd8a82e08e21365b0afdf91b10cefbf53c50e71a8cbdcf37879d0ca7aa69d271705fa75444cd3bee67

  • SSDEEP

    786432:hiJbSlzWq3IfxlzWq3IfDA1xDRZPBohLbX0k2otM7PLbX0k26tM7V0EelcJuMWVO:hiZSxn3exn3EA1zkhLb92otM7PLb926k

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • signMagisTV_TM-MAAL.apk
    .apk android arch:arm

    com.android.msandroid

    com.interactive.brasiliptv.ui.activity.WelcomeActivity


  • IJMDal.Data
  • af.bin
  • amazingkids.otf
  • cacert.pem
  • domain_test.json
  • gomediad.so
    .elf linux arm
  • httping
    .elf linux arm
  • icon_max_data_encrypted_xxxyyy.png
  • icon_titl_last_encrypted.png
  • ijiami.ajm
  • ijiami.dat
  • image_icon_constructor_encrypted.png
  • routeMap.json
  • sign_verify.png
  • signed.bin
  • test1.html
    .html

Android Permissions

signMagisTV_TM-MAAL.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_MEDIA_STORAGE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS