b5afdc67e82ea2e8cc4dff1ca91f3afcf53ed5e680102c9b5a0af373a70fffaa[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

b5afdc67e82ea2e8cc4dff1ca91f3afcf53ed5e680102c9b5a0af373a70fffaa.apk.zip
Size

18.9MB
MD5

7bef3b6fc634b3d932f4798c2ae2cb22
SHA1

6040ac9845768fde11b0029de64f2edd16e54852
SHA256

4b9b893425cac7a58ef14606f047a0404a780f026aac557f9d9c0050a2ae821a
SHA512

2545d2a1786cae1f638df9032ee085ff5e14540ae0805f5bf15b08b179aebb8586f95ddea50473e38d75422cef943135ee52a630d5931106fba75d9e7faf30c1
SSDEEP

393216:n1dVkXuwB+Fh43PmyGJvbXAOWhGsHa2Yj/JwL5zG6O6:n1dVdwBYgsFohKjBmlO6

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

b5afdc67e82ea2e8cc4dff1ca91f3afcf53ed5e680102c9b5a0af373a70fffaa.apk.zip
.zip

Password: infected
b5afdc67e82ea2e8cc4dff1ca91f3afcf53ed5e680102c9b5a0af373a70fffaa.apk
.apk android arch:arm

com.amazon.avod.thirdpartyclient

com.amazon.avod.secondscreen.activity.CompanionModeActivity

Activities

com.amazon.avod.client.activity.HomeScreenActivity

com.amazon.avod.intent.action.VIEW_HOME_SCREEN
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW

com.amazon.avod.client.activity.LibraryActivity

android.intent.action.VIEW
com.amazon.avod.intent.action.VIEW_YVL
android.intent.action.VIEW

com.amazon.avod.client.activity.DownloadsActivity

android.intent.action.VIEW
com.amazon.avod.intent.action.VIEW_YVL_DEVICE
com.amazon.avod.intent.action.VIEW_DOWNLOADS
android.intent.action.VIEW

com.amazon.avod.client.activity.WatchlistGridActivity

android.intent.action.VIEW
com.amazon.avod.intent.action.VIEW_WATCHLIST
android.intent.action.VIEW

com.amazon.avod.client.activity.DetailPageActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
com.amazon.avod.action.offlinePlayback
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.MAIN
android.intent.action.VIEW

com.amazon.avod.client.activity.SearchListActivity

android.intent.action.VIEW
android.intent.action.SEARCH
android.intent.action.VIEW
android.intent.action.VIEW

com.amazon.avod.client.activity.WebViewActivity

android.intent.action.MAIN

com.amazon.avod.client.activity.PrimeSignUpActivity

com.amazon.avod.intent.action.PRIME_SIGNUP
android.intent.action.MAIN
android.intent.action.VIEW

com.amazon.avod.thirdpartyclient.ThirdPartyPlaybackActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.WEB_SEARCH
android.intent.action.VIEW

com.amazon.avod.settings.page.MainSettings

android.intent.action.VIEW
android.intent.action.MAIN
android.intent.action.VIEW

com.amazon.avod.client.activity.BrowseGridActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.amazon.avod.client.activity.LandingPageActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.amazon.avod.launchscreens.LaunchScreensActivity

android.intent.action.VIEW

com.amazon.avod.client.activity.WebViewSignUpActivity

com.amazon.avod.intent.action.SIGNUP
android.intent.action.MAIN
android.intent.action.VIEW

com.amazon.avod.client.activity.DeepLinkSettingsForwardingActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
com.amazon.avod.intent.action.SETTINGS
android.intent.action.VIEW

com.amazon.avod.playbackclient.BasicPlaybackActivity

android.intent.action.MAIN

Permissions

com.android.vending.BILLING
android.permission.BLUETOOTH
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.USE_CREDENTIALS
com.amazon.avod.SDK_ACCESS
com.amazon.CONTENT_PROVIDER_ACCESS
com.samsung.permission.USE_MHDR_SERVICE
com.amazon.avod.thirdpartyclient.permission.C2D_MESSAGE
com.amazon.dcp.sso.permission.account.changed
com.amazon.dcp.sso.permission.AmazonAccountPropertyService.property.changed
amazon.permission.COLLECT_METRICS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.VIBRATE
com.amazon.dcp.metrics.permission.METRICS_PERMISSION
com.amazon.dcp.config.permission.DYN_CONFIG_VALUES_UPDATED
com.amazon.identity.auth.device.perm.AUTH_SDK
com.amazon.identity.permission.GENERIC_IPC
com.amazon.dcp.sso.permission.USE_DEVICE_CREDENTIALS
com.amazon.dcp.sso.permission.MANAGE_COR_PFM
com.amazon.dcp.sso.permission.CUSTOMER_ATTRIBUTE_SERVICE
com.amazon.identity.permission.CAN_CALL_MAP_INFORMATION_PROVIDER
com.amazon.identity.permission.CALL_AMAZON_DEVICE_INFORMATION_PROVIDER
com.amazon.appmanager.preload.permission.READ_PRELOAD_DEVICE_INFO_PROVIDER
com.google.android.c2dm.permission.RECEIVE
android.permission.CHANGE_NETWORK_STATE

Receivers

com.amazon.avod.notification.DownloadNotificationActionReceiver

com.amazon.avod.notification.DownloadNotificationAction.PAUSE
com.amazon.avod.notification.DownloadNotificationAction.RESUME
com.amazon.avod.notification.DownloadNotificationAction.CANCEL

com.amazon.avod.thirdpartyclient.updater.ApplicationUpdatedBroadcastReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.amazon.device.ads.AmazonOOReferrerBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.google.android.gms.gcm.GcmReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

com.amazon.avod.identity.AVODMAPBroadcastReceiver

com.amazon.dcp.sso.action.account.added
com.amazon.dcp.sso.action.account.removed
com.amazon.dcp.sso.action.secondary.account.added
com.amazon.dcp.sso.action.secondary.account.removed
com.amazon.identity.action.ACCOUNT_FOR_PACKAGE_CHANGED

com.amazon.avod.userdownload.UserDownloadManager$DownloadRetryBroadcastReceiver

com.amazon.avod.ACTION_REFRESH_DOWNLOAD_TASK

com.amazon.avod.qahooks.QAAutomationReceiver

com.amazon.avod.NEXT_EPISODE
com.amazon.avod.DISMISS_DIALOG
com.amazon.avod.DOWNLOAD
com.amazon.avod.PLAY
com.amazon.avod.PUSH_NOTIFICATION
com.amazon.avod.XRAY
com.amazon.avod.GET_SERVER_CONFIG
com.amazon.avod.COLD_START
com.amazon.avod.GARBAGE_COLLECTION
com.amazon.avod.RESET_OAUTH_TOKEN
com.amazon.avod.OAUTH_TOKEN_SIMULATE_FAILURE
com.amazon.avod.IDENTITY_INFORMATION
com.amazon.avod.DISABLE_NOTIFICATIONS
com.amazon.avod.CONNECTIVITY
com.amazon.avod.SYNC
com.amazon.avod.SECONDSCREEN
com.amazon.avod.LOAD_BOND_DOCUMENT
com.amazon.avod.DOWNLOAD_BRIDGE
com.amazon.avod.LOCALE_INFORMATION

com.amazon.avod.locale.LocaleChangedBroadcastReceiver

android.intent.action.LOCALE_CHANGED

com.amazon.avod.playbackclient.sdk.PlaybackSdkBroadcastReceiver

com.amazon.avod.action.SERVICE_CLIENT

com.amazon.avod.playbackclient.feature.audiofocus.AudioFocusManager$RemoteControlReceiver

android.intent.action.MEDIA_BUTTON

com.amazon.avod.perf.PlaybackPerfBroadcastReceiver

com.amazon.avod.action.PLAYBACK_PERF

com.amazon.identity.auth.device.storage.LambortishClock$ChangeTimestampsBroadcastReceiver

android.intent.action.TIME_SET

com.amazon.identity.auth.accounts.SessionUserChangedToAccountForPackageChangedAdpater

com.amazon.dcp.sso.action.session.users.changed

com.amazon.communication.NosNotificationReceiver

com.amazon.intent.action.NOS_DATA_TRANSFER

com.amazon.communication.heartbeat.HeartbeatBroadcastReceiver

com.amazon.intent.action.NOS_DATA_TRANSFER

Services

com.amazon.avod.sdk.DownloadSdkService

com.amazon.avod.sdk.internal.aidl.AivDownloadSdk

com.amazon.avod.thirdpartyclient.pushnotification.gcm.GcmMessageHandlingService

com.google.android.c2dm.intent.RECEIVE

com.amazon.avod.thirdpartyclient.pushnotification.gcm.ATVInstanceIDListenerService

com.google.android.gms.iid.InstanceID

com.amazon.identity.auth.accounts.MAPSubAuthenticatorService

com.amazon.dcp.sso.AccountSubAuthenticator

com.amazon.avod.sync.authenticator.AuthenticatorService

android.accounts.AccountAuthenticator

com.amazon.avod.sync.syncadapter.ATVSyncService

android.content.SyncAdapter

com.amazon.avod.playbackclient.sdk.PlaybackSdkService

com.amazon.avod.sdk.internal.aidl.AivPlaybackSdk

com.amazon.identity.auth.device.storage.DirtyDataSyncingService

com.amazon.identity.action.SYNC_DIRTY_DATA

com.amazon.identity.auth.device.storage.DatabaseCleaner$DatabaseCleaningService

com.amazon.identity.action.CLEAN_DATA

com.amazon.communication.AndroidTCommService

com.amazon.communication.TCOMM
VERSION
bDomainCertSecL0.dat
bdevcert.dat
bgroupcert.dat
devcert.dat
devcerttemplate.dat
gallery-image-data-correct.json
gallery-image-data-with-incorrect-values.json
gallery-image-data-with-missing-fields.json
gallery-image-data-with-nested-object.json
index.js
.js
index.js.meta
metrics_configuration
ndrcerttemplate.dat
ndrgpriv.dat
ndrpriv.dat
prinit.dat
priv.dat
release_number
subtitle_presets.json
unsignedtemplate.dat
voVidDec.dat
zgpriv.dat
zprivencr.dat
zprivsig.dat

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.amazon.avod.thirdpartyclient

com.amazon.avod.secondscreen.activity.CompanionModeActivity

Activities

com.amazon.avod.client.activity.HomeScreenActivity

com.amazon.avod.client.activity.LibraryActivity

com.amazon.avod.client.activity.DownloadsActivity

com.amazon.avod.client.activity.WatchlistGridActivity

com.amazon.avod.client.activity.DetailPageActivity

com.amazon.avod.client.activity.SearchListActivity

com.amazon.avod.client.activity.WebViewActivity

com.amazon.avod.client.activity.PrimeSignUpActivity

com.amazon.avod.thirdpartyclient.ThirdPartyPlaybackActivity

com.amazon.avod.settings.page.MainSettings

com.amazon.avod.client.activity.BrowseGridActivity

com.amazon.avod.client.activity.LandingPageActivity

com.amazon.avod.launchscreens.LaunchScreensActivity

com.amazon.avod.client.activity.WebViewSignUpActivity

com.amazon.avod.client.activity.DeepLinkSettingsForwardingActivity

com.amazon.avod.playbackclient.BasicPlaybackActivity

Permissions

Receivers

com.amazon.avod.notification.DownloadNotificationActionReceiver

com.amazon.avod.thirdpartyclient.updater.ApplicationUpdatedBroadcastReceiver

com.amazon.device.ads.AmazonOOReferrerBroadcastReceiver

com.google.android.gms.gcm.GcmReceiver

com.amazon.avod.identity.AVODMAPBroadcastReceiver

com.amazon.avod.userdownload.UserDownloadManager$DownloadRetryBroadcastReceiver

com.amazon.avod.qahooks.QAAutomationReceiver

com.amazon.avod.locale.LocaleChangedBroadcastReceiver

com.amazon.avod.playbackclient.sdk.PlaybackSdkBroadcastReceiver

com.amazon.avod.playbackclient.feature.audiofocus.AudioFocusManager$RemoteControlReceiver

com.amazon.avod.perf.PlaybackPerfBroadcastReceiver

com.amazon.identity.auth.device.storage.LambortishClock$ChangeTimestampsBroadcastReceiver

com.amazon.identity.auth.accounts.SessionUserChangedToAccountForPackageChangedAdpater

com.amazon.communication.NosNotificationReceiver

com.amazon.communication.heartbeat.HeartbeatBroadcastReceiver

Services

com.amazon.avod.sdk.DownloadSdkService

com.amazon.avod.thirdpartyclient.pushnotification.gcm.GcmMessageHandlingService

com.amazon.avod.thirdpartyclient.pushnotification.gcm.ATVInstanceIDListenerService

com.amazon.identity.auth.accounts.MAPSubAuthenticatorService

com.amazon.avod.sync.authenticator.AuthenticatorService

com.amazon.avod.sync.syncadapter.ATVSyncService

com.amazon.avod.playbackclient.sdk.PlaybackSdkService

com.amazon.identity.auth.device.storage.DirtyDataSyncingService

com.amazon.identity.auth.device.storage.DatabaseCleaner$DatabaseCleaningService

com.amazon.communication.AndroidTCommService