General

  • Target

    PelisMax1102.apk

  • Size

    54.8MB

  • MD5

    d8e86bda666f958cf2048a366c70eb12

  • SHA1

    ef518dff3fdc5d46d8be26c22c9c0a759d338556

  • SHA256

    2a082a251186f073265791338799ad0e1eec0c3f4fd3b8a911bc5ec34538cf9a

  • SHA512

    6b8b6b1119e082a4dc6b981287b4d53dd2570011a072b46790a008a0b6417b5393a89813ff70b129ec1c452d90c465fb7de3c8ca3db75e3a728e65337d4bc0b9

  • SSDEEP

    786432:ts6B1FnNxWDKGvQm/1uYD5bi1b84H7UpbFlds6lOQ8is3iycHF0To3FHVYcJJXIN:i6BvnNkD0dYdilsbdI3VcmTo3ccJVIN

Score
10/10

Malware Config

Signatures

  • Android Xamalicious payload 1 IoCs
  • Xamalicious family
  • Requests dangerous framework permissions 3 IoCs

Files

  • PelisMax1102.apk
    .apk android arch:arm64 arch:arm

    com.equirozdev.pelismaxv6.app

    crc646093a59931b65dfb.SplashActivity


Android Permissions

PelisMax1102.apk

Permissions

android.permission.Ad_ID

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.equirozdev.pelismaxv6.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.FOREGROUND_SERVICE

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE