General

  • Target

    Power Pro Player(3.0.3).apk

  • Size

    86.5MB

  • MD5

    df5aadbcf2087479c0f762cef15d2ee0

  • SHA1

    c6ae8006f22b3103614072375970e59376ee47b7

  • SHA256

    487823ab1a8b6ca74944eaf3615b2fb927b0f763820aaf90050057fe308bf7ef

  • SHA512

    27df9d05611a4c959e89598dcf48c1de7b062daa4440e8b3adf34994e09fd035ec82e3aadd447ad95a7b8e68f9de21979b173718b0b10eeb1f3fa5c68ddd54c8

  • SSDEEP

    1572864:koKxb35p2W4/LEoJePuHtwY5UhJQxRm2fVQSKeQDbPE/F8be2hHexUru0:/KxVroIo6uHpUAxffVmTE/sD0x4

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Files

  • Power Pro Player(3.0.3).apk
    .apk android arch:arm arch:x86 arch:x64 arch:arm64 arch:mips arch:mips64

    com.powerproplayer.powerproplayeriptvbox

    com.powerproplayer.powerproplayeriptvbox.view.activity.SplashActivity


  • audience_network.dex
    .dex
  • demo.html
    .html
  • media.exolist.json
  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • nopie_openvpn.x86
    .elf linux x86
  • nopie_openvpn.x86_64
    .elf linux x64
  • open_sans.ttf
  • open_sans_regular.ttf
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.x86
    .elf linux x86
  • pie_openvpn.x86_64
    .elf linux x64
  • terms.html
    .html

Android Permissions

Power Pro Player(3.0.3).apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_OWNER_DATA

android.permission.WRITE_OWNER_DATA

android.permission.CLEAR_APP_CACHE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE