General

  • Target

    857f4ee9a912a5e2c11f3a400bd1f286e9e3b2539105aab0e349c18a44a403ea.apk.zip

  • Size

    20.6MB

  • MD5

    1edf54a308f3b14205f2ec5fc95a5a40

  • SHA1

    fc2cf2ff4cb0b68caef92ba9301ee3e25f05e09e

  • SHA256

    b8abdbd51adc66c23e3fb1223e040a3d652f97ab7d70c65c6aaf650b49d21a5f

  • SHA512

    73e7354abcfd64161ce2c01c52eeb0afba8aedd10200dff445cd9fc7d30e641925cbb0cec7f1575560b236577de8d917038cf9ab9dfb37cbfb6808fa234ad186

  • SSDEEP

    393216:rpx3aFDoiv/bqvwGt+KUpn5CfwYc+srcoEsBwk5qyJK+cThYonsfb3U:r/KVoivzqoWXUDQwKSSsfFJAThY+aA

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • 857f4ee9a912a5e2c11f3a400bd1f286e9e3b2539105aab0e349c18a44a403ea.apk.zip
    .zip

    Password: infected

  • 857f4ee9a912a5e2c11f3a400bd1f286e9e3b2539105aab0e349c18a44a403ea.apk
    .apk android arch:arm arch:x86

    com.mxtech.videoplayer.ad

    com.mxtech.videoplayer.ad.ActivityWelcomeMX


  • GTM-KZ83HD3.json
  • actionsQueue.js
    .js
  • consentform.html
    .html .js
  • crashlytics-build.properties
  • default_handshake.json
  • effect0.ogg
  • logo_opensubtitles.png
    .png
  • mm.js
    .js
  • mraid.js
    .js
  • vpaid.js
    .js