General

  • Target

    GBox-1.5.3.2-150302-153984-website.apk

  • Size

    73.5MB

  • MD5

    6e03e21868c7f9c127fe5300cebb28ec

  • SHA1

    49b2491f1c8e566e334ba497cf695e4901ab4294

  • SHA256

    a892f65e0d3f105fa12c2775168ca558ad2669681dc03808e8eb125bf4e19e07

  • SHA512

    0e7cb8fa60d2e3bfe0f8cd99758b320e7d24333c8843782999be3658df8246b1b2a86655b19bc6dfbf69707ba4153291767742a460f72fe3ea9a77be3e3ab57c

  • SSDEEP

    1572864:GQtn5LBapfjXg57gaYPLNLmZHfODjrcRvXVs62dCdR:RHahUmNmM8vX6ndCdR

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 28 IoCs

Files

  • GBox-1.5.3.2-150302-153984-website.apk
    .apk android arch:arm64 arch:arm

    com.gbox.android

    .SplashActivity


  • MG-214816114.apk
    .apk android arch:arm arch:arm64

    com.google.android.gms

    com.google.android.location.settings.GoogleLocationSettingsActivity


  • Barcode.apk
    .apk android arch:arm64 arch:arm

    com.google.android.gms.policy_vision_optional_barcode_dynamite


  • ChimeraManifest.pb
  • module.yaml
  • agconnect-services.json
  • auth_account.json
  • baseline.prof
  • clearcut.public.json
  • com.google.android.apps.photos.json
  • com.google.android.apps.tachyon_str3.json
  • com.google.android.libraries.communications.conference.device.json
  • com.google.android.libraries.communications.conference.user.json
  • com.google.android.libraries.communications.conference.user_name.json
  • com.google.android.libraries.consentverifier#com.google.android.apps.photos.json
  • com.google.android.libraries.internal.growth.growthkit.json
  • com.google.android.libraries.mdi.sync.json
  • com.google.android.libraries.notifications#com.google.android.apps.photos.json
  • com.google.android.libraries.notifications.platform#com.google.android.apps.photos.json
  • com.google.android.libraries.notifications.platform.json
  • com.google.android.libraries.onegoogle#com.google.android.apps.photos.json
  • com.google.android.libraries.onegoogle.json
  • com.google.android.libraries.performance.primes#com.google.android.apps.photos.json
  • com.google.android.libraries.performance.primes.json
  • com.google.android.libraries.social.populous#com.google.android.apps.photos.json
  • droidguard.json
  • grs_sdk_global_route_config_opensdkService.json
  • grs_sdk_server_config.json
  • grs_sp.bks
  • hmsincas.bks
  • hmsrootcas.bks
  • instantapps.json
  • photos_android_auto#com.google.android.apps.photos.json
  • recaptcha.html
    .html
  • a
  • b
  • baseline.prof
  • c
  • cbg_root.cer
  • clean_process.json
    .js
  • dt_template_ad_one_big_img.xml
  • dt_template_ad_one_small_img.xml
  • gbox-helper.apk
    .apk android

    com.gbox.android.helper

    com.gbox.android.helper.IntentActivity


  • baseline.prof
  • gpstore.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.android.vending

    com.google.android.finsky.setupui.VpaSelectionOptionalStepActivity


  • 1
  • account.bin
  • back.bin
  • background-backdrop.bin
  • background.bin
  • baseline.prof
  • baseline.profm
  • body.bin
  • button-apps.bin
  • button-backdrop-apps.bin
  • button-backdrop-movies.bin
  • button-label.bin
  • button-movies.bin
  • button-shadow-backdrop.bin
  • button-shadow.bin
  • cart-drawer-button-label-apps.bin
  • cart-drawer-button-label-movies.bin
  • cart-drawer-button.bin
  • cart-fop-layout.bin
  • cart-title.bin
  • checkbox-label.bin
  • checkbox-toggled.bin
  • checkbox-untoggled.bin
  • clickable-container.bin
  • color.fplshader
  • com_google_android_gms_clearcut_client_package_metadata.binarypb
  • com_google_android_libraries_consentverifier_package_metadata.binarypb
  • com_google_android_libraries_mdi_sync_package_metadata.binarypb
  • com_google_android_libraries_onegoogle_package_metadata.binarypb
  • com_google_android_libraries_performance_primes_package_metadata.binarypb
  • com_google_android_libraries_personalization_footprints_package_metadata.binarypb
  • container.bin
  • dev_triggered_update_progress_animation.json
  • edge_soften_texture.fplshader
  • fop.bin
  • generic_category.json
  • instrument-icon.bin
  • instrument-scroll-view.bin
  • instrument-selected.bin
  • instrument-subtitle.bin
  • instrument-title.bin
  • invisible-backdrop.bin
  • line.bin
  • link.bin
  • loading-spinner-arc-size.motivespline
  • loading-spinner-arc-start-angle.motivespline
  • loading-spinner.bin
  • meta
  • nav-button-background.bin
  • nav-button-icon.bin
  • notification_clickability.tflite
  • offer-label.bin
  • offer-price.bin
  • padding-x-pinwidth.bin
  • padding-x-screenwidth.bin
  • padding-y-12mm.bin
  • padding-y-18mm.bin
  • padding-y-24mm.bin
  • padding-y-36mm.bin
  • padding-y-48mm.bin
  • padding-y-64mm.bin
  • permissions-app-icon.bin
  • permissions-caret-root.bin
  • permissions-desc.bin
  • permissions-icon.bin
  • permissions-label.bin
  • permissions-scroll-view.bin
  • permissions-subtitle.bin
  • permissions-title.bin
  • pin-account.bin
  • pin-backspace.bin
  • pin-entry-incorrect-line.bin
  • pin-entry-incorrect-text.bin
  • pin-entry-line.bin
  • pin-entry.bin
  • pin-key-button-stub.bin
  • pin-key-button.bin
  • pin-key-label.bin
  • pin-key-shadow-backdrop.bin
  • pin-key-shadow.bin
  • pin-pad.bin
  • pin-play-logo.bin
  • pin-reset-backdrop.bin
  • pin-reset-button.bin
  • pin-reset-label.bin
  • pin-title.bin
  • play-logo.bin
  • price-apps.bin
  • price-movies.bin
  • reticle.fplshader
  • root.bin
  • show-less.bin
  • show-more.bin
  • text.fplshader
  • texture.fplshader
  • texture_atlas.bin
  • texture_atlas.webp
  • title.bin
  • vertical-layout-center-aligned.bin
  • vertical-layout-center-scrollview.bin
  • vertical-layout.bin
  • warmcold_stitched.json
  • warmcold_stitched_v2.json
  • winner_confetti.json
  • grs_sdk_global_route_config_apptouchupdatesdk.json
  • grs_sdk_global_route_config_dtm.json
  • grs_sdk_global_route_config_extservice.json
  • grs_sdk_global_route_config_hianalytics.json
  • grs_sdk_global_route_config_hmscoreInstallerSDK.json
  • grs_sdk_global_route_config_location.json
  • grs_sdk_global_route_config_opendevicesdk.json
  • grs_sdk_global_route_config_opensdkService.json
  • grs_sdk_global_route_config_tileserver.json
  • grs_sdk_global_route_config_tsms.json
  • grs_sdk_global_route_config_updatesdk.json
  • grs_sdk_server_config.json
  • grs_sp.bks
  • hmsincas.bks
  • install_new_apps.json
  • libpreload32.so
    .elf linux arm
  • libpreload64.so
    .elf linux aarch64
  • loading.json
  • omsdk-v1.js
    .js

Android Permissions

GBox-1.5.3.2-150302-153984-website.apk

Permissions

android.permission.CALL_PHONE

com.google.android.googleapps.permission.GOOGLE_AUTH

com.google.android.googleapps.permission.GOOGLE_AUTH.OTHER_SERVICES

com.google.android.googleapps.permission.GOOGLE_AUTH.YouTubeUser

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.RECEIVE_BOOT_COMPLETED

com.gbox.android.permission.access

android.permission.WAKE_LOCK

android.permission.ACTION_SCREEN_ON

android.permission.ACTION_SCREEN_OFF

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.READ_APP_SPECIFIC_LOCALES

android.permission.ACCOUNT_MANAGER

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_WIMAX_STATE

android.permission.BIND_APPWIDGET

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH_SCAN

android.permission.BODY_SENSORS

android.permission.BROADCAST_STICKY

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_WIMAX_STATE

android.permission.CLEAR_APP_CACHE

android.permission.DISABLE_KEYGUARD

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME

android.permission.EXPAND_STATUS_BAR

android.permission.FLASHLIGHT

android.permission.GET_PACKAGE_SIZE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.MANAGE_ACCOUNTS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.PERSISTENT_ACTIVITY