Samsung Max_4[.]6[.]10[.]apk

General

Target

Samsung Max_4.6.10.apk
Size

25.6MB
MD5

3c0053ad602f52ac98b1ca428809de46
SHA1

324158db17085758c4be74b96c880f1360add5a3
SHA256

9414ef4ebf9f5b690248d9b39e1e45d4b235bb729c3f4f03af36f662c4b9b4aa
SHA512

7f773397a43bfd20020bdae13de596500698d9e43841e821017aad03395758571fe84b3051c3d5c0e12b12180e299c1ea566f1b30a51d419e8dbc65a6d51cf41
SSDEEP

393216:FpUNG9Tn+Ob9owNfZ079puKUmODUES1cszI3VnmtYFVY/pTlpOPhBAZQw:T9pnkgfZU9pDUGES1cszCVnmtvxehMQw

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 5 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

Samsung Max_4.6.10.apk
.apk android arch:arm64 arch:arm

com.opera.max.global

com.opera.max.ui.v2.MainActivity

Activities

com.opera.max.sa.SaLoginBrowserActivity

android.intent.action.VIEW

com.opera.max.ui.v2.PermissionRationaleActivity

android.intent.action.VIEW_PERMISSION_USAGE
android.intent.action.VIEW_PERMISSION_USAGE_FOR_PERIOD

com.opera.max.ui.v2.MainActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.service.quicksettings.action.QS_TILE_PREFERENCES

com.opera.max.ui.v2.UltraLauncherActivity

android.intent.action.MAIN

com.opera.max.webapps.WebAppGlobalIconActivity$FacebookGlobalIconActivity

android.intent.action.MAIN

com.opera.max.webapps.WebAppGlobalIconActivity$InstagramGlobalIconActivity

android.intent.action.MAIN

com.opera.max.webapps.WebAppGlobalIconActivity$TwitterGlobalIconActivity

android.intent.action.MAIN

com.opera.max.webapps.WebAppGlobalIconActivity$WikipediaGlobalIconActivity

android.intent.action.MAIN

Permissions

android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.GET_ACCOUNTS
com.samsung.android.samsungaccount.permission.ACCOUNT_MANAGER
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
com.opera.max.permission.GET_PREINSTALL_DATA
android.permission.VIBRATE
android.permission.PACKAGE_USAGE_STATS
android.permission.ACCESS_FINE_LOCATION
com.samsung.android.provider.indexing.permission.ACCESS_PROVIDER
android.permission.EXPAND_STATUS_BAR
android.permission.QUERY_ALL_PACKAGES
android.permission.HIGH_SAMPLING_RATE_SENSORS
android.permission.POST_NOTIFICATIONS
com.android.vending.BILLING
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

com.opera.max.webapps.WebAppBadges$BadgeReceiver

android.intent.action.BADGE_COUNT_UPDATE

com.opera.max.web.ConnectivityMonitor$ChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.opera.max.BoostUIService$StartAtBootReceiver

android.intent.action.BOOT_COMPLETED

com.opera.max.web.TimeManager$DateTimeReceiver

android.intent.action.DATE_CHANGED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

com.opera.max.web.LocaleUtils$LocaleChangeReceiver

android.intent.action.LOCALE_CHANGED

com.opera.max.web.BoostNotificationManager$LocaleChangeReceiver

android.intent.action.LOCALE_CHANGED

com.opera.max.global.sdk.quicksettings.QuickSettingsManager$LocaleChangeReceiver

android.intent.action.LOCALE_CHANGED

com.opera.max.web.ReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.opera.max.webapps.WebAppUtils$WebViewEventReceiver

com.opera.max.global.wvev

com.opera.max.webapps.WebAppUtils$WebViewCommandReceiver

com.opera.max.global.wvcmd

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.opera.max.web.NLService

android.service.notification.NotificationListenerService

com.opera.max.vpn.NativeVPNService

android.net.VpnService

com.opera.max.global.sdk.quicksettings.QuickSettingsServiceNMobileSavings

android.service.quicksettings.action.QS_TILE

com.opera.max.global.sdk.quicksettings.QuickSettingsServiceNCovert

android.service.quicksettings.action.QS_TILE

com.opera.max.global.sdk.quicksettings.QuickSettingsServiceNAllSavings

android.service.quicksettings.action.QS_TILE

com.opera.max.fcm.impl.FcmService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
origin.apk
.apk android arch:arm64 arch:arm

com.opera.max.global

com.opera.max.ui.v2.MainActivity

Activities

com.opera.max.sa.SaLoginBrowserActivity

android.intent.action.VIEW

com.opera.max.ui.v2.PermissionRationaleActivity

android.intent.action.VIEW_PERMISSION_USAGE
android.intent.action.VIEW_PERMISSION_USAGE_FOR_PERIOD

com.opera.max.ui.v2.MainActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.service.quicksettings.action.QS_TILE_PREFERENCES

com.opera.max.ui.v2.UltraLauncherActivity

android.intent.action.MAIN

com.opera.max.webapps.WebAppGlobalIconActivity$FacebookGlobalIconActivity

android.intent.action.MAIN

com.opera.max.webapps.WebAppGlobalIconActivity$InstagramGlobalIconActivity

android.intent.action.MAIN

com.opera.max.webapps.WebAppGlobalIconActivity$TwitterGlobalIconActivity

android.intent.action.MAIN

com.opera.max.webapps.WebAppGlobalIconActivity$WikipediaGlobalIconActivity

android.intent.action.MAIN

Permissions

android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.GET_ACCOUNTS
com.samsung.android.samsungaccount.permission.ACCOUNT_MANAGER
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
com.opera.max.permission.GET_PREINSTALL_DATA
android.permission.VIBRATE
android.permission.PACKAGE_USAGE_STATS
android.permission.ACCESS_FINE_LOCATION
com.samsung.android.provider.indexing.permission.ACCESS_PROVIDER
android.permission.EXPAND_STATUS_BAR
android.permission.QUERY_ALL_PACKAGES
android.permission.HIGH_SAMPLING_RATE_SENSORS
android.permission.POST_NOTIFICATIONS
com.android.vending.BILLING
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

com.opera.max.webapps.WebAppBadges$BadgeReceiver

android.intent.action.BADGE_COUNT_UPDATE

com.opera.max.web.ConnectivityMonitor$ChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.opera.max.BoostUIService$StartAtBootReceiver

android.intent.action.BOOT_COMPLETED

com.opera.max.web.TimeManager$DateTimeReceiver

android.intent.action.DATE_CHANGED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

com.opera.max.web.LocaleUtils$LocaleChangeReceiver

android.intent.action.LOCALE_CHANGED

com.opera.max.web.BoostNotificationManager$LocaleChangeReceiver

android.intent.action.LOCALE_CHANGED

com.opera.max.global.sdk.quicksettings.QuickSettingsManager$LocaleChangeReceiver

android.intent.action.LOCALE_CHANGED

com.opera.max.web.ReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.opera.max.webapps.WebAppUtils$WebViewEventReceiver

com.opera.max.global.wvev

com.opera.max.webapps.WebAppUtils$WebViewCommandReceiver

com.opera.max.global.wvcmd

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.opera.max.web.NLService

android.service.notification.NotificationListenerService

com.opera.max.vpn.NativeVPNService

android.net.VpnService

com.opera.max.global.sdk.quicksettings.QuickSettingsServiceNMobileSavings

android.service.quicksettings.action.QS_TILE

com.opera.max.global.sdk.quicksettings.QuickSettingsServiceNCovert

android.service.quicksettings.action.QS_TILE

com.opera.max.global.sdk.quicksettings.QuickSettingsServiceNAllSavings

android.service.quicksettings.action.QS_TILE

com.opera.max.fcm.impl.FcmService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

Samsung Max_4.6.10.apk

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.GET_ACCOUNTS

com.samsung.android.samsungaccount.permission.ACCOUNT_MANAGER

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.opera.max.permission.GET_PREINSTALL_DATA

android.permission.VIBRATE

android.permission.PACKAGE_USAGE_STATS

android.permission.ACCESS_FINE_LOCATION

com.samsung.android.provider.indexing.permission.ACCESS_PROVIDER

android.permission.EXPAND_STATUS_BAR

android.permission.QUERY_ALL_PACKAGES

android.permission.HIGH_SAMPLING_RATE_SENSORS

android.permission.POST_NOTIFICATIONS

com.android.vending.BILLING

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Sharing

General

Malware Config

Signatures

Files

com.opera.max.global

com.opera.max.ui.v2.MainActivity

Activities

com.opera.max.sa.SaLoginBrowserActivity

com.opera.max.ui.v2.PermissionRationaleActivity

com.opera.max.ui.v2.MainActivity

com.opera.max.ui.v2.UltraLauncherActivity

com.opera.max.webapps.WebAppGlobalIconActivity$FacebookGlobalIconActivity

com.opera.max.webapps.WebAppGlobalIconActivity$InstagramGlobalIconActivity

com.opera.max.webapps.WebAppGlobalIconActivity$TwitterGlobalIconActivity

com.opera.max.webapps.WebAppGlobalIconActivity$WikipediaGlobalIconActivity

Permissions

Receivers

com.opera.max.webapps.WebAppBadges$BadgeReceiver

com.opera.max.web.ConnectivityMonitor$ChangeReceiver

com.opera.max.BoostUIService$StartAtBootReceiver

com.opera.max.web.TimeManager$DateTimeReceiver

com.opera.max.web.LocaleUtils$LocaleChangeReceiver

com.opera.max.web.BoostNotificationManager$LocaleChangeReceiver

com.opera.max.global.sdk.quicksettings.QuickSettingsManager$LocaleChangeReceiver

com.opera.max.web.ReferrerReceiver

com.opera.max.webapps.WebAppUtils$WebViewEventReceiver

com.opera.max.webapps.WebAppUtils$WebViewCommandReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.opera.max.web.NLService

com.opera.max.vpn.NativeVPNService

com.opera.max.global.sdk.quicksettings.QuickSettingsServiceNMobileSavings

com.opera.max.global.sdk.quicksettings.QuickSettingsServiceNCovert

com.opera.max.global.sdk.quicksettings.QuickSettingsServiceNAllSavings

com.opera.max.fcm.impl.FcmService

com.google.firebase.messaging.FirebaseMessagingService

com.opera.max.global

com.opera.max.ui.v2.MainActivity

Activities

com.opera.max.sa.SaLoginBrowserActivity

com.opera.max.ui.v2.PermissionRationaleActivity

com.opera.max.ui.v2.MainActivity

com.opera.max.ui.v2.UltraLauncherActivity

com.opera.max.webapps.WebAppGlobalIconActivity$FacebookGlobalIconActivity

com.opera.max.webapps.WebAppGlobalIconActivity$InstagramGlobalIconActivity

com.opera.max.webapps.WebAppGlobalIconActivity$TwitterGlobalIconActivity

com.opera.max.webapps.WebAppGlobalIconActivity$WikipediaGlobalIconActivity

Permissions

Receivers

com.opera.max.webapps.WebAppBadges$BadgeReceiver

com.opera.max.web.ConnectivityMonitor$ChangeReceiver

com.opera.max.BoostUIService$StartAtBootReceiver

com.opera.max.web.TimeManager$DateTimeReceiver

com.opera.max.web.LocaleUtils$LocaleChangeReceiver

com.opera.max.web.BoostNotificationManager$LocaleChangeReceiver

com.opera.max.global.sdk.quicksettings.QuickSettingsManager$LocaleChangeReceiver

com.opera.max.web.ReferrerReceiver

com.opera.max.webapps.WebAppUtils$WebViewEventReceiver

com.opera.max.webapps.WebAppUtils$WebViewCommandReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.opera.max.web.NLService

com.opera.max.vpn.NativeVPNService

com.opera.max.global.sdk.quicksettings.QuickSettingsServiceNMobileSavings

com.opera.max.global.sdk.quicksettings.QuickSettingsServiceNCovert

com.opera.max.global.sdk.quicksettings.QuickSettingsServiceNAllSavings

com.opera.max.fcm.impl.FcmService