ab661db3b235187916a90c0e749cb986c2e55a2cda6077299d0746c62cee97e6

Sharing

Copy URL Twitter E-mail

General

Target

ab661db3b235187916a90c0e749cb986c2e55a2cda6077299d0746c62cee97e6
Size

12.1MB
MD5

babdf8964d633f694c464483da2e22da
SHA1

0cda063b1544cc0d1af913e827df6a6dee258c5f
SHA256

ab661db3b235187916a90c0e749cb986c2e55a2cda6077299d0746c62cee97e6
SHA512

3d8d805320d67b53c0eb751e8da931a244f93642c0c19d39078353cda7407cae1dc89bade227b3f1bf503caf7167d80142f50ea190c0e0c6bb5c1339615830c3
SSDEEP

393216:U9GOdE0TrEly8TCV02hNj8eeZ9ziw4y2g:UPTri2hNjqBsHg

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

ab661db3b235187916a90c0e749cb986c2e55a2cda6077299d0746c62cee97e6
.apk android arch:arm64 arch:arm arch:x86 arch:x64

live.thunder.storm

live.thunder.storm.wwwwwwwwwwwwwwww

Activities

live.thunder.storm.MainActivity

android.intent.action.MAIN

live.thunder.storm.wwwwwwwwwwwwwwww

android.intent.action.MAIN

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.jioplayeractivity

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.jioplayeractivitypip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.defaultplayer

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.alliumhlsplayer

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.ytplayer

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.defaultplayerpip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.alliumhlsplayerpip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.mkvplayer

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.iptvplayer

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.youplayer

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.youplayer3

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.youplayer3pip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.youplayerpip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.youplayer2

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.youplayer2pip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.mkvplayerpip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.cookieplayer

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.cookieplayerpip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.bdiptvplayer

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.bdiptvplayerpip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.iptvplayerpip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.thymeplayer

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.alliumdrmplayer

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.airteldrmplayer

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.airteldrmplayerpip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.thymeplayerpip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.alliumdrmplayerpip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.drmvttplayer

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.drmvttplayerpip

com.google.android.exoplayer.demo.action.VIEW

live.thunder.storm.lllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllll.Activity

android.intent.action.SEARCH

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_NETWORK_STATE
android.permission.FOREGROUND_SERVICE
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.INTERNET
live.thunder.storm.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.VIBRATE
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_APP_BADGE
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

live.thunder.storm.llllllllllllllllllll.MyMediaButtonReceiver

android.intent.action.MEDIA_BUTTON

com.onesignal.GcmBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE

com.onesignal.BootUpReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

com.onesignal.UpgradeReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

ab661db3b235187916a90c0e749cb986c2e55a2cda6077299d0746c62cee97e6

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.INTERNET

live.thunder.storm.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.VIBRATE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Sharing

General

Malware Config

Signatures

Files

live.thunder.storm

live.thunder.storm.wwwwwwwwwwwwwwww

Activities

live.thunder.storm.MainActivity

live.thunder.storm.wwwwwwwwwwwwwwww

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.jioplayeractivity

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.jioplayeractivitypip

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.defaultplayer

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.alliumhlsplayer

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.ytplayer

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.defaultplayerpip

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.alliumhlsplayerpip

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.mkvplayer

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.iptvplayer

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.youplayer

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.youplayer3

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.youplayer3pip

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.youplayerpip

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.youplayer2

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.youplayer2pip

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.mkvplayerpip

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.cookieplayer

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.cookieplayerpip

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.bdiptvplayer

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.bdiptvplayerpip

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.iptvplayerpip

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.thymeplayer

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.alliumdrmplayer

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.airteldrmplayer

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.airteldrmplayerpip

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.thymeplayerpip

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.alliumdrmplayerpip

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.drmvttplayer

live.thunder.storm.llllllllllllllllllllllllllllllllllllll.drmvttplayerpip

live.thunder.storm.lllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllll.Activity

Permissions

Receivers

live.thunder.storm.llllllllllllllllllll.MyMediaButtonReceiver

com.onesignal.GcmBroadcastReceiver

com.onesignal.BootUpReceiver

com.onesignal.UpgradeReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

ab661db3b235187916a90c0e749cb986c2e55a2cda6077299d0746c62cee97e6