Overview

overview

7

Static

static

7

Magisk_Alp...01.apk

android-9-x86

1

Magisk_Alp...01.apk

android-10-x64

1

baseline.prof

windows7-x64

3

baseline.prof

windows10-2004-x64

3

baseline.profm

windows7-x64

3

baseline.profm

windows10-2004-x64

3

boot_patch.sh

ubuntu-18.04-amd64

boot_patch.sh

debian-9-armhf

boot_patch.sh

debian-9-mips

boot_patch.sh

debian-9-mipsel

bootctl

ubuntu-18.04-amd64

bootctl

debian-9-armhf

bootctl

debian-9-mips

bootctl

debian-9-mipsel

futility

debian-9-armhf

6

kernel.keyblock

windows7-x64

3

kernel.keyblock

windows10-2004-x64

3

kernel_dat...bprivk

windows7-x64

3

kernel_dat...bprivk

windows10-2004-x64

3

main.apk

android-9-x86

main.apk

android-10-x64

main.apk

android-11-x64

module_installer.sh

ubuntu-18.04-amd64

module_installer.sh

debian-9-armhf

module_installer.sh

debian-9-mips

module_installer.sh

debian-9-mipsel

stub.apk

android-9-x86

7

stub.apk

android-10-x64

7

stub.apk

android-11-x64

1

uninstaller.sh

windows7-x64

3

uninstaller.sh

windows10-2004-x64

3

util_functions.sh

windows7-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    Magisk_Alpha_26401.apk

  • Size

    12.5MB

  • MD5

    d7734232c638b803a79cd0c50921404a

  • SHA1

    d9f39b56857f0d641aef177cf6ddeb403bd9126f

  • SHA256

    24b41c22a7a02d5cd8b08f3d34be57bbef721f70541628e69f22182e0d4b457c

  • SHA512

    bd0e68149675a572ab71438d6cd77e37beb968429844d448ea763dbe213f7901867011d624f3670e678c5733b520fda7777ec8c67986d045264ef36782e7e05a

  • SSDEEP

    196608:oU3T2XXJfrgsHOh+62kdUTF59zvXMp3NyXiN4L7nHN0NEflt0uT06sCKl/SM0wBC:o+TK1Sh+62QcXMp36g4/nH+NEfnXtUvC

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Files

  • Magisk_Alpha_26401.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    io.github.vvb2060.magisk

    com.topjohnwu.magisk.ui.MainActivity


  • baseline.prof
  • baseline.profm
  • boot_patch.sh
    .sh linux
  • bootctl
    .elf linux aarch64
  • futility
    .elf linux arm
  • kernel.keyblock
  • kernel_data_key.vbprivk
  • main.jar
    .apk android
  • module_installer.sh
    .sh linux
  • stub.apk
    .apk android

    io.github.vvb2060.magisk

    x.COMPONENT_PLACEHOLDER_2


  • uninstaller.sh
  • util_functions.sh

Android Permissions

Magisk_Alpha_26401.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.HIDE_OVERLAY_WINDOWS

android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION

android.permission.POST_NOTIFICATIONS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES