Resubmissions

05/11/2023, 17:27

231105-v1gghabc62 7

05/11/2023, 17:16

231105-vs627ahc8x 7

05/11/2023, 17:13

231105-vrexbahc7s 7

General

  • Target

    base.apk

  • Size

    35.9MB

  • MD5

    5d89c57b543b9fc1c291aa6bbe3fb5e7

  • SHA1

    9cd8f23e975d3831907371c0269e7c8e2e26945d

  • SHA256

    b391370726b4d063046db14691a79e6a9cdd47e1b9092b43a29a820cb8385e0a

  • SHA512

    242992ea0bf5a6f105e89a38e23fc48659738ac53f86def651d9655aa38b679d12c36ea2c06edd2e1af14fe9962795f83e70a292f8d4cddced5356d63111952d

  • SSDEEP

    786432:hiJbSlzWq3IfxlzWq3IfDA1xDRZPBohLbX0k2otM7PLbX0k26tM7V0EelcJuMWVy:hiZSxn3exn3EA1zkhLb92otM7PLb9264

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • base.apk
    .apk android arch:arm

    com.android.msandroid

    com.interactive.brasiliptv.ui.activity.WelcomeActivity


  • IJMDal.Data
  • af.bin
  • amazingkids.otf
  • cacert.pem
  • domain_test.json
  • gomediad.so
    .elf linux arm
  • httping
    .elf linux arm
  • icon_max_data_encrypted_xxxyyy.png
  • icon_titl_last_encrypted.png
  • ijiami.ajm
  • ijiami.dat
  • image_icon_constructor_encrypted.png
  • routeMap.json
  • sign_verify.png
  • signed.bin
  • test1.html
    .html

Android Permissions

base.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_MEDIA_STORAGE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS