pelishax[.]apk | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
pelishax.apk
Size 96.2MB
Sample240613-mt7fcazarn
SHA256 df020e7a3587d966eafff39f2dffcaac3401c090ba90bb25ee76fd00e6e4894d
MD5 bb0c876084b512cf13110bf6d250eed5
SHA1 3d08697e5fc05a3975e50349930b0e17251605cf
SHA512 61019e0f7b39b8ebfb49bdedde3b116b06270c4b6b90c175c024fa83c223f394c565fd61b974cd05bf9e224173f963ee223418abf0b87836d50164ae6e31bbab
SSDEEP 1572864:fq/Yy8dtSpkt+fzPvv4PvuCkwdJxPugFN6Oj3iZKL9:Sudt88qvC0wdJcgF4O7IKL9
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS

File Explorer

pelishax.apk

.apk 96.2MB

pelishax.apk

SHA256 df020e7a3587d966eafff39f2dffcaac3401c090ba90bb25ee76fd00e6e4894d
MD5 bb0c876084b512cf13110bf6d250eed5
SHA1 3d08697e5fc05a3975e50349930b0e17251605cf
SHA512 61019e0f7b39b8ebfb49bdedde3b116b06270c4b6b90c175c024fa83c223f394c565fd61b974cd05bf9e224173f963ee223418abf0b87836d50164ae6e31bbab
SSDEEP 1572864:fq/Yy8dtSpkt+fzPvv4PvuCkwdJxPugFN6Oj3iZKL9:Sudt88qvC0wdJcgF4O7IKL9
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.pelishax

android.permission.INTERNET android.permission.READ_EXTERNAL_STORAGE android.permission.WAKE_LOCK android.permission.FOREGROUND_SERVICE android.permission.QUICKBOOT_POWERON android.permission.RECEIVE_BOOT_COMPLETED android.permission.VIBRATE com.android.launcher.permission.INSTALL_SHORTCUT android.permission.ACCESS_WIFI_STATE android.permission.POST_NOTIFICATIONS android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_NETWORK_STATE android.permifControllerActivityssion.RECEIVE_BOOT_COMPLETED android.permission.EXPAND_STATUS_BAR android.permission.READ_PHONE_STATE android.permission.MODIFY_AUDIO_SETTINGS android.permission.READ_MEDIA_IMAGES android.permission.READ_MEDIA_VIDEO android.permission.READ_MEDIA_AUDIO android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.PACKAGE_USAGE_STATS com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.UPDATE_SHORTCUT com.sonyericsson.home.permission.BROADCAST_BADGE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.anddoes.launcher.permission.UPDATE_COUNT com.majeur.launcher.permission.UPDATE_BADGE com.huawei.android.launcher.permission.CHANGE_BADGE com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS android.permission.READ_APP_BADGE com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS me.everything.badger.permission.BADGE_COUNT_READ me.everything.badger.permission.BADGE_COUNT_WRITE com.android.vending.CHECK_LICENSE com.google.android.gms.permission.AD_ID android.permission.USE_BIOMETRIC android.permission.USE_FINGERPRINT com.google.android.c2dm.permission.RECEIVE com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE android.permission.ACCESS_ADSERVICES_ATTRIBUTION android.permission.ACCESS_ADSERVICES_AD_ID com.google.android.providers.gsf.permission.READ_GSERVICES android.permission.ACCESS_ADSERVICES_TOPICS com.pelishax.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.pelishax.ui.home.WebViewActivity

com.pelishax.ui.home.WebViewActivity2

com.pelishax.ui.downloadmanager.ui.browser.BrowserActivity

android.intent.action.SEND

com.facebook.ads.AudienceNetworkActivity

com.ironsource.sdk.controller.ControllerActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.pelishax.ui.downloadmanager.ui.settings.PreferenceActivity

com.pelishax.ui.downloadmanager.ui.settings.SettingsActivity

android.intent.action.APPLICATION_PREFERENCES

com.facebook.FacebookActivity

com.facebook.CustomTabActivity

android.intent.action.VIEW android.intent.action.VIEW

com.pelishax.ui.base.BaseActivity

com.pelishax.ui.player.cast.ExpandedControlsActivity

android.intent.action.MAIN

com.pelishax.ui.payment.PaymentDetails

com.pelishax.ui.splash.SplashActivity

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.pelishax.ui.login.LoginActivity

com.pelishax.ui.users.PhoneAuthActivity

com.pelishax.ui.users.UserProfiles

com.pelishax.ui.devices.UserDevicesManagement

com.pelishax.ui.register.RegisterActivity

com.pelishax.ui.settings.SettingsActivity

com.pelishax.ui.streaming.StreamingetailsActivity

com.pelishax.ui.moviedetails.MovieDetailsActivity

com.pelishax.ui.seriedetails.SerieDetailsActivity

com.pelishax.ui.animes.AnimeDetailsActivity

com.pelishax.ui.player.activities.EasyPlexMainPlayer

com.pelishax.ui.register.RegistrationSucess

com.pelishax.ui.trailer.TrailerPreviewActivity

com.pelishax.ui.player.cast.settings.CastPreference

android.intent.action.MAIN

com.pelishax.ui.upcoming.UpcomingTitlesActivity

com.pelishax.ui.player.cast.queue.ui.QueueListViewActivity

android.intent.action.MAIN

com.pelishax.ui.profile.EditProfileActivity

com.pelishax.ui.payment.Payment

com.pelishax.ui.payment.PaymentPaypal

com.pelishax.ui.payment.PaymentStripe

com.pelishax.ui.player.activities.EmbedActivity

com.pelishax.ui.player.activities.YoutubePlayer

com.pelishax.ui.login.PasswordForget

com.pelishax.ui.seriedetails.EpisodeDetailsActivity

com.pelishax.ui.casts.CastDetailsActivity

com.pelishax.ui.downloadmanager.ui.adddownload.AddDownloadActivity

com.pelishax.ui.downloadmanager.ui.filemanager.FileManagerDialog

com.github.dhaval2404.imagepicker.ImagePickerActivity

com.pelishax.ui.splash.ConfiigurationFirstLaunch

com.paypal.pyplcheckout.ui.feature.home.activities.PYPLHomeActivity

com.paypal.pyplcheckout.ui.feature.home.activities.PYPLInitiateCheckoutActivity

android.intent.action.VIEW

com.paypal.openid.RedirectUriReceiverActivity

android.intent.action.VIEW

com.paypal.pyplcheckout.ui.feature.threeds.ThreeDS20Activity

com.paypal.authcore.authentication.TokenActivity

com.paypal.openid.AuthorizationManagementActivity

com.github.javiersantos.piracychecker.activities.LicenseActivity

com.stripe.android.paymentsheet.PaymentSheetActivity

com.stripe.android.paymentsheet.PaymentOptionsActivity

com.stripe.android.customersheet.CustomerSheetActivity

com.stripe.android.paymentsheet.addresselement.AddressElementActivity

com.stripe.android.paymentsheet.paymentdatacollection.bacs.BacsMandateConfirmationActivity

com.stripe.android.paymentsheet.paymentdatacollection.polling.PollingActivity

com.stripe.android.paymentsheet.ui.SepaMandateActivity

com.stripe.android.link.LinkForegroundActivity

com.stripe.android.link.LinkRedirectHandlerActivity

android.intent.action.VIEW

com.stripe.android.ui.core.cardscan.CardScanActivity

com.stripe.android.view.AddPaymentMethodActivity

com.stripe.android.view.PaymentMethodsActivity

com.stripe.android.view.PaymentFlowActivity

com.stripe.android.view.PaymentAuthWebViewActivity

com.stripe.android.view.PaymentRelayActivity

com.stripe.android.payments.StripeBrowserLauncherActivity

com.stripe.android.payments.StripeBrowserProxyReturnActivity

android.intent.action.VIEW

com.stripe.android.payments.core.authentication.threeds2.Stripe3ds2TransactionActivity

com.stripe.android.googlepaylauncher.GooglePayLauncherActivity

com.stripe.android.googlepaylauncher.GooglePayPaymentMethodLauncherActivity

com.stripe.android.payments.paymentlauncher.PaymentLauncherConfirmationActivity

com.stripe.android.payments.bankaccount.ui.CollectBankAccountActivity

com.stripe.android.stripe3ds2.views.ChallengeActivity

com.appodeal.ads.adapters.iab.unified.VideoPlayerActivity

com.appodeal.ads.TestActivity

com.amazon.device.ads.DTBAdActivity

android.intent.action.VIEW

com.appodeal.consent.form.ConsentActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

com.wortise.ads.consent.ConsentActivity

com.wortise.ads.events.ClickHandlerActivity

com.wortise.ads.interstitial.InterstitialActivity

com.wortise.ads.push.PushInterstitialActivity

com.yalantis.ucrop.UCropActivity

com.facebook.CustomTabMainActivity

com.amazon.device.ads.DTBInterstitialActivity

com.vungle.warren.ui.VungleActivity

com.inmobi.ads.rendering.InMobiAdActivity

com.applovin.adview.AppLovinFullscreenActivity

com.applovin.adview.AppLovinFullscreenThemedActivity

com.applovin.sdk.AppLovinWebViewActivity

com.applovin.mediation.hybridAds.MaxHybridMRecAdActivity

com.applovin.mediation.hybridAds.MaxHybridNativeAdActivity

com.applovin.mediation.MaxDebuggerActivity

com.applovin.mediation.MaxDebuggerDetailActivity

com.applovin.mediation.MaxDebuggerMultiAdActivity

com.applovin.mediation.MaxDebuggerAdUnitsListActivity

com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity

com.applovin.mediation.MaxDebuggerAdUnitDetailActivity

com.applovin.mediation.MaxDebuggerCmpNetworksListActivity

com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity

com.applovin.mediation.MaxDebuggerTcfInfoListActivity

com.applovin.mediation.MaxDebuggerTcfStringActivity

com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity

com.applovin.mediation.MaxDebuggerTestModeNetworkActivity

com.applovin.mediation.MaxDebuggerUnifiedFlowActivity

com.applovin.mediation.MaxDebuggerWaterfallKeywordsActivity

com.applovin.creative.MaxCreativeDebuggerActivity

com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity

com.tapjoy.TJAdUnitActivity

com.tapjoy.TJContentActivity

com.tapjoy.TJWebViewActivity

com.mobilefuse.sdk.MobileFuseFullscreenActivity

com.mobilefuse.sdk.MobileFuseFullscreenTransparentActivity

com.mobilefuse.sdk.experimental.NativeInterstitialActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.firebase.auth.internal.GenericIdpActivity

android.intent.action.VIEW

com.google.firebase.auth.internal.RecaptchaActivity

android.intent.action.VIEW

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.gms.ads.AdActivity

com.google.android.gms.ads.OutOfContextTestingActivity

com.google.android.gms.ads.NotificationHandlerActivity

com.ironsource.mediationsdk.testSuite.TestSuiteActivity

com.mobilefuse.sdk.ad.rendering.splashad.MobileFuseSplashAdActivity

com.criteo.publisher.CriteoInterstitialActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialExpressActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity

com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity

com.bytedance.sdk.openadsdk.adapter.PangleAdInterstitialActivity

com.cardinalcommerce.a.setTextLocale

com.cardinalcommerce.a.setTextLocales

io.bidmachine.nativead.view.VideoPlayerActivity

sg.bigo.ads.ad.splash.AdSplashActivity

sg.bigo.ads.ad.splash.LandscapeAdSplashActivity

sg.bigo.ads.api.AdActivity

sg.bigo.ads.core.mraid.MraidVideoActivity

com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity

com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity

com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore

com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity

com.fyber.inneractive.sdk.activities.FyberReportAdActivity

com.explorestack.iab.mraid.MraidActivity

com.explorestack.iab.mraid.MraidDialogActivity

com.explorestack.iab.vast.activity.VastActivity

com.mbridge.msdk.reward.player.MBRewardVideoActivity

com.amazon.aps.ads.activity.ApsInterstitialActivity

com.mbridge.msdk.activity.MBCommonActivity

com.mbridge.msdk.out.LoadingActivity

com.pelishax.ui.downloadmanager.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON

com.pelishax.ui.receiver.NetworkChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.pelishax.ui.downloadmanager.receiver.NotificationReceiver

com.easyplexdemoapp.ui.downloadmanager.receiver.NotificationReceiver.NOTIFY_ACTION_SHUTDOWN_APP

com.adjust.sdk.AdjustReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.appsflyer.SingleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.appodeal.ads.AppodealPackageAddedReceiver

android.intent.action.PACKAGE_ADDED

com.wortise.ads.geofencing.GeofenceBroadcastReceiver

com.google.android.gms.cast.framework.media.MediaIntentReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.gms.measurement.AppMeasurementReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

pelishax.apk

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.QUICKBOOT_POWERON

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_WIFI_STATE

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permifControllerActivityssion.RECEIVE_BOOT_COMPLETED

android.permission.EXPAND_STATUS_BAR

android.permission.READ_PHONE_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.PACKAGE_USAGE_STATS

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

com.android.vending.CHECK_LICENSE

com.google.android.gms.permission.AD_ID

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.google.android.c2dm.permission.RECEIVE

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.ACCESS_ADSERVICES_TOPICS