General

  • Target

    teleLatino_IVDW.apk

  • Size

    32.7MB

  • MD5

    09401a2c878c3bd164135ab0258f2f75

  • SHA1

    451bfeb03e41047fed59af5a69ab820010cccf87

  • SHA256

    9473c6b27bee16d2deb75445f2a0673e072677dcadef73ca85c13a1c4a9dc195

  • SHA512

    cbd04f34d3845736e3379de5f91920ebaa6804ef96675146e04385091b71bb9c309b9cea20a0d9d7e92a1a74041ae86f8c21931567d3494062e269b63c5e23ba

  • SSDEEP

    786432:qiJbXuzWq3Ifx5zWq3IfDASvM5nra3pmaOWN5EkSAHj4RxEff5UkT2:qiZXqn3e1n3EASOrwtOiXAGg

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • teleLatino_IVDW.apk
    .apk android arch:arm

    Password: Infectado

    com.global.latinotvod

    com.interactive.brasiliptv.ui.activity.WelcomeActivity


  • IJMDal.Data
  • InteGration_4.5.2.ttf
  • af.bin
  • amazingkids.otf
  • cacert.pem
  • domain_test.json
  • gomediad.so
    .elf linux arm
  • httping
    .elf linux arm
  • icon_max_data_encrypted_xxxyyy.png
  • icon_titl_last_encrypted.png
  • ijiami.ajm
  • ijiami.dat
  • image_icon_constructor_encrypted.png
  • sign_verify.png
  • signed.bin
  • test1.html
    .html

Android Permissions

teleLatino_IVDW.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_MEDIA_STORAGE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS