Resubmissions

03/09/2023, 18:14

230903-wvbvhabd6t 7

03/09/2023, 18:13

230903-wtrjkabg69 7

03/09/2023, 18:12

230903-ws6bbsbg66 7

03/09/2023, 18:09

230903-wrpbesbd5z 7

General

  • Target

    signMagisTV_TM-GACK.apk

  • Size

    35.9MB

  • MD5

    8c79dbda5ea9e760003df5dd0bd9bc52

  • SHA1

    a17206e171bb180507abcb7c405837e59b71936c

  • SHA256

    eabf5ad77d7f96f443865f82eb34384410f7f52beb7afd43f57359be136a6930

  • SHA512

    dcf0e7e73d832520fff946abbb97ffdfb0390e3192b9bd9f21aef20109426a44b96f5f4627dde725d6ca80ce8d37cf50a6c8463af34fc8ff9c61542dd0e0766c

  • SSDEEP

    786432:hiJbSlzWq3IfxlzWq3IfDA1xDRZPBohLbX0k2otM7PLbX0k26tM7V0EelcJuMWVX:hiZSxn3exn3EA1zkhLb92otM7PLb926R

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • signMagisTV_TM-GACK.apk
    .apk android arch:arm

    com.android.msandroid

    com.interactive.brasiliptv.ui.activity.WelcomeActivity


  • IJMDal.Data
  • af.bin
  • amazingkids.otf
  • cacert.pem
  • domain_test.json
  • gomediad.so
    .elf linux arm
  • httping
    .elf linux arm
  • icon_max_data_encrypted_xxxyyy.png
  • icon_titl_last_encrypted.png
  • ijiami.ajm
  • ijiami.dat
  • image_icon_constructor_encrypted.png
  • routeMap.json
  • sign_verify.png
  • signed.bin
  • test1.html
    .html

Android Permissions

signMagisTV_TM-GACK.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_MEDIA_STORAGE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS