General

  • Target

    Magisk-v27.0.apk

  • Size

    11.9MB

  • MD5

    4475064c5f6a5474e31f2f3dfafc22ed

  • SHA1

    872199f3781706f51b84d8a89c1d148d26bcdbad

  • SHA256

    f511bd33d3242911d05b0939f910a3133ef2ba0e0ff1e098128f9f3cd0c16610

  • SHA512

    cf6095f2d93e078f42d26265699deed377af12f304dd83179140d32a69a034639d4e07b83b8bb999d503f6d8dc6ced46b6b88741ed39771eed6a12411648e4bc

  • SSDEEP

    196608:tHkjVWApVgQBoMrdr+TnhpPsOz0VbMtiquy/WP0SxqdHgCg2RNB2KNcjktbs1:tHYGQBpdqpibWDe0SuH6WNBrba

Score
10/10

Malware Config

Signatures

  • Antidot family
  • Antidot payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • Magisk-v27.0.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.topjohnwu.magisk

    com.topjohnwu.magisk.ui.MainActivity


  • main.jar
    .apk android
  • stub.apk
    .apk android

    com.topjohnwu.magisk

    x.COMPONENT_PLACEHOLDER_2


Android Permissions

Magisk-v27.0.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.HIDE_OVERLAY_WINDOWS

android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION

android.permission.POST_NOTIFICATIONS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES