78170790349f32b899e3643cab7629b123e1a9fe82717aaa0e8cb89b3dd2365f[.]apk[.]zip

General

Target

78170790349f32b899e3643cab7629b123e1a9fe82717aaa0e8cb89b3dd2365f.apk.zip
Size

16.4MB
MD5

23d37a65ce13dd204a364f2fc9982bad
SHA1

b09955a7167db6f0c60db6c9909e1ce64ada1326
SHA256

b6780e5c1194ff72382a4a8cff6ca779f81b01f03e60a2eeebfa4d2fa9f0cf37
SHA512

d6249bbfe26593f385031f31db6cc522d37e5081674495f404bc9b0a8d4f6f8756272239ff4a282aacbf4473a953c3f6dcc2d63f57c540a5585fb27e2c0824f5
SSDEEP

393216:ikM78Qk6ytcbdeHaUtABwl7hDQessYQOI30H/hcfCp:i/YAdeduWl7DsGjqhcfA

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

78170790349f32b899e3643cab7629b123e1a9fe82717aaa0e8cb89b3dd2365f.apk.zip
.zip

Password: infected
78170790349f32b899e3643cab7629b123e1a9fe82717aaa0e8cb89b3dd2365f.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.cin.pro

com.movie.ui.activity.SplashActivity

Activities

com.movie.ui.activity.shows.ShowActivity

android.intent.action.MAIN

com.movie.ui.activity.SplashActivity

android.intent.action.MAIN

com.utils.ExpandedControlsActivity

android.intent.action.MAIN

com.movie.ui.activity.PlayerActivity

com.google.android.exoplayer.demo.action.VIEW
com.google.android.exoplayer.demo.action.VIEW_LIST

com.movie.ui.activity.MainActivity

android.intent.action.SEARCH

com.nononsenseapps.filepicker.FilePickerActivity

android.intent.action.GET_CONTENT

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_FINE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_SYNC_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SYNC_SETTINGS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.REQUEST_INSTALL_PACKAGES
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_WIFI_STATE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

com.utils.seriesguide.ExampleExtensionReceiver

com.battlelancer.seriesguide.api.SeriesGuideExtension

com.vungle.warren.NetworkProviderReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.startapp.android.publish.common.metaData.BootCompleteListener

android.intent.action.BOOT_COMPLETED

io.moneytise.support.NetworkStateReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED

Services

com.movie.data.sync.PopularMoviesAuthenticatorService

android.accounts.AccountAuthenticator

com.movie.data.sync.PopularMoviesSyncService

android.content.SyncAdapter

com.utils.seriesguide.ExampleExtension

com.battlelancer.seriesguide.api.SeriesGuideExtension

io.moneytise.service.MoneytiserService

android.net.VpnService
libAppseeNativeExtensions
.elf linux x64
libAppseeVideoEncoder-14
.elf linux x86

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.cin.pro

com.movie.ui.activity.SplashActivity

Activities

com.movie.ui.activity.shows.ShowActivity

com.movie.ui.activity.SplashActivity

com.utils.ExpandedControlsActivity

com.movie.ui.activity.PlayerActivity

com.movie.ui.activity.MainActivity

com.nononsenseapps.filepicker.FilePickerActivity

Permissions

Receivers

com.utils.seriesguide.ExampleExtensionReceiver

com.vungle.warren.NetworkProviderReceiver

com.startapp.android.publish.common.metaData.BootCompleteListener

io.moneytise.support.NetworkStateReceiver

Services

com.movie.data.sync.PopularMoviesAuthenticatorService

com.movie.data.sync.PopularMoviesSyncService

com.utils.seriesguide.ExampleExtension

io.moneytise.service.MoneytiserService