Star_Live_release_20230207_1708_protected[.]apk

General

Target

Star_Live_release_20230207_1708_protected.apk
Size

14.4MB
MD5

5b8923cc481bc0f72834d97d8a230781
SHA1

d0d031ade7b6f63554fffc8219fcae7502ffaa72
SHA256

f444fee130501e125c7eebc454c979eacafb069a657a7be69b68b9acf26b3b79
SHA512

128b9524acd929eb570331dffeb9b2e8d098b0ca802814fd757e7e8cef6fe6a72e2afe27e15ab1a374a89510c67f9cd09cff5f712368eb595a9f4dea81d16e6a
SSDEEP

393216:pjNb2h4tLJFec6M+JCNwgsSwFUnfbGZgD1B0y+3ZUjD:pBqALJFevpJgwgu2DGmD1BiS

Score

8^/10

upx

Malware Config

Signatures

Patched UPX-packed file 1 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
sample	patched_upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

Star_Live_release_20230207_1708_protected.apk
.apk android arch:arm

com.yby.live.v6.star

com.evpad.liveplus.activity.MainActivity

Activities

com.evpad.liveplus.activity.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.VIBRATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SET_WALLPAPER
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.READ_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Services

Android Permissions

Star_Live_release_20230207_1708_protected.apk

Permissions

android.permission.INTERNET

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.SET_WALLPAPER

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Resubmissions

Sharing

General

Malware Config

Signatures

Files

com.yby.live.v6.star

com.evpad.liveplus.activity.MainActivity

Activities

com.evpad.liveplus.activity.MainActivity

Permissions

Services

Android Permissions

Star_Live_release_20230207_1708_protected.apk