General

  • Target

    cfd5084ca4c356335335e4df7dbdc29e053500963069b1a6f6409843bb329fd2.apk.zip

  • Size

    20.6MB

  • MD5

    dd1e62fd8c5e24215687f2df98de9e83

  • SHA1

    36693620408402749dbde425a637a49edcb9c649

  • SHA256

    ceee10e541cb75fdff821fd645052c08f11f94c2f3c4366bb681324be4b13168

  • SHA512

    c216a3c84676f8242359a4aa80a817802628db545e491f9a61534470723c15fb4f9363ca4f9ca809c541a05063977bb640c1540b2767bfdce4232ee579d043ae

  • SSDEEP

    393216:LQL0TMv2DA2Q/3O2Cv0+xZZlm3KcAZuYjhtwEOmV81QUcB1FQ3vfOD9g4pB2A:L20TRQnizk6lEYjzwQV2bc3avf06A

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • cfd5084ca4c356335335e4df7dbdc29e053500963069b1a6f6409843bb329fd2.apk.zip
    .zip

    Password: infected

  • cfd5084ca4c356335335e4df7dbdc29e053500963069b1a6f6409843bb329fd2.apk
    .apk android arch:arm arch:x86

    com.mxtech.videoplayer.ad

    com.mxtech.videoplayer.ad.ActivityWelcomeMX


  • GTM-KZ83HD3.json
  • actionsQueue.js
    .js
  • consentform.html
    .html .js
  • crashlytics-build.properties
  • default_handshake.json
  • effect0.ogg
  • logo_opensubtitles.png
    .png
  • mm.js
    .js
  • mraid.js
    .js
  • vpaid.js
    .js