Overview

overview

7

Static

static

7

signMagisT...RT.apk

android-9-x86

1

gomediad.so

debian-9-armhf

3

httping

debian-9-armhf

test1.html

windows7-x64

1

test1.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    signMagisTV_TM-SRRT.apk

  • Size

    35.9MB

  • MD5

    1270378cfec126eadd9b3f9e2c01d572

  • SHA1

    8a9d8b29de7c3de318908a9ce4fb545790306b21

  • SHA256

    26e6f7628f1debc9134874544788a002f54aa4bb609e0b012a98bd660b4e3251

  • SHA512

    8c4c2023452febd92a5ddd5cccd32a6a8603495d343354e51168252b74e6b8663de6ceaa58c47851e0ec21011413956c3c0926f07fa4cd82979addb688607562

  • SSDEEP

    786432:hiJbSlzWq3IfxlzWq3IfDA1xDRZPBohLbX0k2otM7PLbX0k26tM7V0EelcJuMWVC:hiZSxn3exn3EA1zkhLb92otM7PLb926s

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • signMagisTV_TM-SRRT.apk
    .apk android arch:arm

    com.android.msandroid

    com.interactive.brasiliptv.ui.activity.WelcomeActivity


  • IJMDal.Data
  • af.bin
  • amazingkids.otf
  • cacert.pem
  • domain_test.json
  • gomediad.so
    .elf linux arm
  • httping
    .elf linux arm
  • icon_max_data_encrypted_xxxyyy.png
  • icon_titl_last_encrypted.png
  • ijiami.ajm
  • ijiami.dat
  • image_icon_constructor_encrypted.png
  • routeMap.json
  • sign_verify.png
  • signed.bin
  • test1.html
    .html

Android Permissions

signMagisTV_TM-SRRT.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_MEDIA_STORAGE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS