General

  • Target

    YouTube_base.apk

  • Size

    23.5MB

  • MD5

    de63946b5423d38023ed9b681917fe02

  • SHA1

    4f366991304db5124f15a72f5f865a1cb7996a2d

  • SHA256

    9c7c2ff8ccb6effc4327fe21f4e264cddfae9cef2d78e0bd07cd5aa2cdd4ca78

  • SHA512

    35b158e14e268f832ebf68a2138082c173fd2ab510e8f11489fcab03b3b9b9834b695ec1a292887b0ccffb9d4b06447e69208a0585c5608ea18470bbc83e292b

  • SSDEEP

    393216:IPHY9xV6PRS10QmlnFjHwNNdqB/cQ9HihrrN2C1BVSuJMyzkfY:iqLwRm0dFrM0cNhrrAwbSeMUX

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 12 IoCs

Files

  • YouTube_base.apk
    .apk android

    com.google.android.youtube

    com.google.android.apps.youtube.app.application.Shell_SettingsActivity


  • 42_js_module_config.dat
    .js
  • CarroisGothicSC-Regular.ttf
  • ComingSoon-Regular.ttf
  • DancingScript-Regular.ttf
  • MonoSerif-Regular.ttf
  • YTSans-Medium.otf
  • account_link_button.eml_9741cbd606925f05
  • ad_badge.eml_1d9801591a38a8ec
  • advanced_quality_sheet_content.eml-js_1f6940b6dd61d9c1
  • advanced_quality_sheet_content_controller_2cc288d07bb525e6
    .js
  • android_builtin_effects_settings.binarypb
  • android_shorts_timeline_builtin_effects_settings.binarypb
  • animated_button_border.eml_72030b7a85e5127e
  • animated_checkbox.eml_c2e8dc306329e4dd
  • animated_like_icon.eml_304df680dc70f06c
  • animated_subscribe_button.eml_736dbb621d25206d
  • audio_track_sheet_content.eml-js_5cfcd92caee381b3
  • audio_track_sheet_content_controller_b1066937d9f01f9b
    .js
  • avatar.eml_649b3f9052c98472
  • avatar_with_ring.eml_551e54359e567227
  • badge.eml_33ddf11be9fbc659
  • baseline.prof
  • baseline.profm
  • bell_inline_menu.eml_3aa066f86dc2eb69
  • bell_inline_menu_item.eml_3389836ef127271a
  • bottom_sheet_header.eml_b2b7f87b70261134
  • bottom_sheet_list_option.eml_83709da56fdd055e
  • button.eml_23703ec065413f59
  • caption_tracks.eml-js_b95be345d9191c02
  • caption_tracks_controller_96940d4038b8c28c
    .js
  • captions_sheet_content.eml-js_2b00d35cdd8e3460
  • captions_sheet_content_controller_f98bbd52338a9c8e
    .js
  • cast_error_mapper_prod_container_manifest
    .js
  • channel_purchase_button.eml_f2f2f746eb9f81a5
  • clip_button.eml_93fd2e314f8534f1
  • com_android_billingclient_package_metadata.binarypb
  • com_google_android_gms_device_performance_package_metadata.binarypb
  • com_google_android_libraries_consentverifier_package_metadata.binarypb
  • com_google_android_libraries_mdi_sync_package_metadata.binarypb
  • com_google_android_libraries_notifications_package_metadata.binarypb
  • com_google_android_libraries_notifications_platform_package_metadata.binarypb
  • com_google_android_libraries_onegoogle_package_metadata.binarypb
  • com_google_android_libraries_performance_primes_package_metadata.binarypb
  • com_google_android_libraries_user_profile_photopicker_package_metadata.binarypb
  • com_youtube_mainapp_android_package_metadata.binarypb
  • comments_entry_point_button.eml_7176460472782f4c
  • compact_channel_bar.eml_91f95bb5115bee68
  • compact_channel_bar_header.eml_d9e727ff0d602d1f
  • compact_sponsor_button.eml_55061a6394455162
  • compact_subscribe_button.eml_7b3e29d10edc8e9c
  • compact_video.eml_9f5ebfe4d6cba5ea
  • datapush_release_version.binarypb
  • decorated_avatar.eml_cc0d8d891a9e3247
  • decorated_avatar_inner.eml_dad146b981ea2151
  • dislike_button.eml_315c134bb56169fe
  • divider.eml_4ed211b67d4e7a61
  • download_button.eml_ac7956e966af1b14
  • download_icon.eml_7c7e49844a9527b2
  • download_icon_with_partial_playability.eml_a0b81527851a849
  • downloads_page_banner.eml_50898febcb9ad590
  • downloads_page_disclaimer.eml_af71538ee5350d4
  • downloads_page_download_recommendations_header.eml_ac733747ca221a14
  • downloads_page_loading_spinner.eml_521ac6a9f9752df6
  • downloads_page_smart_downloads_header.eml_20f5d78c17c80914
  • downloads_page_smart_downloads_header_unwrapper.eml_ea144e9469278e7b
  • downloads_page_smart_downloads_opt_in_banner.eml_8e5180378b53cd06
  • downloads_page_smart_downloads_zero_state.eml_20bbba6a68686e5e
  • downloads_page_zero_state.eml_4f959407a9350c7a
  • downloads_thumbnail_overlay.eml_68e9c30f4cb546ca
  • drag_and_drop_shadow.eml_5f622411ca4eba1
  • dream_plasma_overlay_alpha.png
    .png
  • dream_time_blur_weights.png
    .png
  • embedded_filegroups_embedded_datapush_proto.dat
  • error_message.eml_ca31b8fbbcc5a319
  • fragment_shader_alpha_scale_es2.glsl
  • fragment_shader_copy_es2.glsl
  • fragment_shader_hsl_es2.glsl
  • fragment_shader_lut_es2.glsl
  • fragment_shader_oetf_es3.glsl
  • fragment_shader_transformation_es2.glsl
  • fragment_shader_transformation_external_yuv_es3.glsl
  • fragment_shader_transformation_hdr_internal_es3.glsl
  • fragment_shader_transformation_sdr_external_es2.glsl
  • fragment_shader_transformation_sdr_internal_es2.glsl
  • fragment_shader_transformation_sdr_oetf_es2.glsl
  • frame_blurred.png
    .png
  • fullscreen_video_action_button.eml_df296ea32a12507e
  • image_preview_supergraph.binarypb
  • info_card_teaser_overlay.eml-js_1411587d60e44302
  • info_card_teaser_overlay_controller_467f2d949dd1650f
    .js
  • like_button.eml_bdf0861f3263865e
  • listen_first_suggested_action_controller_9ec3197fcd16fd7a
    .js
  • listen_first_suggested_action_v2.eml-js_f4432596af1983f5
  • live_ring.eml_7e3f2b758a45631c
  • lut_BEAM.png
    .png
  • lut_BEAM_2.png
    .png
  • lut_BLUSH.png
    .png
  • lut_CRUSH.png
    .png
  • lut_DAWN.png
    .png
  • lut_DOCUMENTARY.png
    .png
  • lut_GLAMOUR.png
    .png
  • lut_GLOW.png
    .png
  • lut_NOIR.png
    .png
  • lut_POP.png
    .png
  • lut_SILVERSCREEN.png
    .png
  • lut_SLATE.png
    .png
  • lut_SUPER8.png
    .png
  • mainapp_filegroup_datapush_manifest.dat
  • me_fragment_shader_es2.glsl
  • me_vertex_shader_es2.glsl
  • media_engine_audio_container_manifest
  • metadata.eml_26b57732801afa7b
  • metadata_content.eml_e2a15cefe06d5b11
  • modern_type_metadata_content.eml_eab1ffa8e3a7a79f
  • notification_bell.eml_4bd246029bb99c8c
  • notification_dot.eml_f6061226d78da84
  • offline_status_indicator.eml_e12b1982ddcbb4dc
  • overflow_button.eml_3fecbb8841903bea
  • paid_content_overlay_controller_5a4a725d1c5ee859
    .js
  • paid_content_overlay_v2.eml-js_22596b964b442eeb
  • playback_quality_list.eml_f62e9abe37df4cfd
  • playback_quality_picker.eml_6244f88f46d93f3d
  • playback_quality_picker_preview.eml_e46f4d81db892c59
  • playback_speed_sheet_content.eml-js_5da25a9bdce9408c
  • playback_speed_sheet_content_controller_c83aa9b6427b31bd
    .js
  • player_disclosure.eml_a7c106703e1d7492
  • playlist_add_to_option.eml-js_4c829373a669c798
  • playlist_add_to_option_controller_accc2b0069552c30
    .js
  • playlist_add_to_option_wrapper.eml-js_30d653f9ddc0cab
  • qos_container_manifest
  • quality_sheet_footer.eml_d41220b4198225bb
  • quality_sheet_header.eml-js_e57ebeb401fc008a
  • quality_sheet_header_controller_13db9d9230ea2e99
    .js
  • query_engine_container_manifest
  • query_engine_container_manifest.dat
  • quick_quality_sheet_content.eml-js_754519f22213345f
  • quick_quality_sheet_content_controller_93ba8f275bea02ad
    .js
  • radio_button.eml_12a2d2cd0e729a36
  • radio_picker.eml_ebcdfa6c078085c6
  • radio_picker_option.eml_75549fe98d9dbc39
  • root_89b394ad1fbbe92c
    .js
  • save_to_playlist_button_vm.eml_b387c69401ba4bc4
  • segmented_like_dislike_button.eml_998311139a36d63a
  • segmented_like_dislike_button_vm.eml_f5e946fa1e0b4ee9
  • silver_screen_grain.png
    .png
  • snackbar.eml_f463aa24e174c5c7
  • spinner.eml_85e302dab6a7a415
  • status_dot.eml_ee2a0ee00cd12e25
  • stories_ring.eml_6c591430e257c34
  • subscribe_button.eml_a79bd5e3860ff9d6
  • subscribe_menu_button.eml_dc52322afacb5b3f
  • subscribe_menu_notifications.eml_e9d2ee34c6109b08
  • subscribed_icon.eml_74c56cd29f2d69f9
  • suggested_action.eml_5ac64c48227702b
  • super8_frame.png
    .png
  • super8_grain.png
    .png
  • switch_button.eml_cdd8f78a85f99852
  • sy0_89b394ad1fbbe92c
    .js
  • sy1_89b394ad1fbbe92c
  • sy2_89b394ad1fbbe92c
  • sy3_89b394ad1fbbe92c
    .js
  • sy4_89b394ad1fbbe92c
    .js
  • sy5_89b394ad1fbbe92c
    .js
  • sy6_89b394ad1fbbe92c
    .js
  • sy7_89b394ad1fbbe92c
    .js
  • sy8_89b394ad1fbbe92c
    .js
  • sy9_89b394ad1fbbe92c
  • sya_89b394ad1fbbe92c
    .js
  • syb_89b394ad1fbbe92c
  • syc_89b394ad1fbbe92c
  • syd_89b394ad1fbbe92c
  • sye_89b394ad1fbbe92c
  • syf_89b394ad1fbbe92c
  • syg_89b394ad1fbbe92c
    .js
  • syh_89b394ad1fbbe92c
  • syi_89b394ad1fbbe92c
  • syj_89b394ad1fbbe92c
    .js
  • syk_89b394ad1fbbe92c
    .js
  • syl_89b394ad1fbbe92c
  • sym_89b394ad1fbbe92c
  • thumbnail.eml_3c74587781ca86be
  • timely_action.eml-js_27e6abe7890619d
  • timely_action_controller_53f4e8eecbe81d3d
    .js
  • timely_action_delegate_f5163bf9277cd30c
  • timely_actions_overlay.eml-js_96b494cd8b0f4e85
  • timely_actions_overlay_controller_b6817f1a6568258b
    .js
  • toggle_button.eml_8d903178e45a1268
  • toggle_button_inner.eml_b4c1b30e0f584e53
  • triptych_thumbnail.eml_496b97ffebc333e5
  • verified_badge.eml_20900a61e1491362
  • vertex_shader_thumbnail_strip_es2.glsl
  • vertex_shader_transformation_es2.glsl
  • vertex_shader_transformation_es3.glsl
  • video_action_bar.eml_ae00c9e2a513e69c
  • video_action_button.eml_8ad3b94b935eb438
  • video_action_button_pill.eml_a303670c17b3b863
  • video_action_toggle_button.eml_7f74da9f2af0bbf2
  • video_badge.eml_879ef5bd3166680
  • video_metadata.eml_9c7bb2ef2bc05f1e
  • video_subtitle.eml_486af003cb864b81
  • vignette.png
    .png
  • youtube_activity_container_manifest.dat
  • youtube_mobile_master_cert_2020_public_key
  • youtube_mobile_master_cert_2021_public_key
  • youtube_mobile_master_cert_2022_public_key
  • youtube_mobile_master_cert_2023_public_key
  • youtube_prod_container_manifest.dat
  • youtube_sans.xml
    .xml
  • youtube_sans_black.xml
    .xml
  • youtube_sans_bold.xml
    .xml
  • youtube_sans_bold_font.ttf
  • youtube_sans_extrabold.xml
    .xml
  • youtube_sans_light.xml
    .xml
  • youtube_sans_medium.xml
    .xml
  • youtube_sans_semibold.xml
    .xml
  • youtube_singleton_account_container_manifest.dat

Android Permissions

YouTube_base.apk

Permissions

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MANAGE_DOCUMENTS

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

com.google.android.providers.gsf.permission.READ_GSERVICES

com.google.android.c2dm.permission.RECEIVE

android.permission.WAKE_LOCK

android.permission.NFC

android.permission.CAMERA

android.permission.FOREGROUND_SERVICE_CAMERA

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_MICROPHONE

android.permission.VIBRATE

com.google.android.gms.permission.AD_ID_NOTIFICATION

com.google.android.gms.permission.AD_ID

com.google.android.youtube.permission.C2D_MESSAGE

android.permission.GET_PACKAGE_SIZE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.RUN_USER_INITIATED_JOBS

android.permission.USE_FINGERPRINT

android.permission.USE_BIOMETRIC

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_CONTACTS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.HIGH_SAMPLING_RATE_SENSORS

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.google.android.youtube.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION