General

  • Target

    app-release.apk

  • Size

    10.7MB

  • MD5

    4d1de127abc2e9aa2b8582c8c5614085

  • SHA1

    84c3cdea6f4b10d0e2abeb24bdfead502a348a63

  • SHA256

    1b1eebac29f8ab1a41e5f20bbdceefb3341e93bc3d55a0f995c902b0fe877fe2

  • SHA512

    c335f687121eecc37f9bb8cc1502d3053c5e58f6cd2213fce2dee0e89d1f3b58e7fb80449a33a0ebb4f58f56b72460d37192d81c87a0aa0fa4c55bf6cc4ef571

  • SSDEEP

    196608:mCyjD8a3EB2o+hgwa1mMQ+MUnw701XW3fHqghsH5Wt5RgYyiewAi0Kp:mdDZLKwgmgqAX8qCHrHz

Score
10/10

Malware Config

Signatures

  • Antidot family
  • Antidot payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • app-release.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.topjohnwu.magisk

    com.topjohnwu.magisk.ui.MainActivity


  • stub.apk
    .apk android

    com.topjohnwu.magisk

    x.COMPONENT_PLACEHOLDER_2


Android Permissions

app-release.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.HIDE_OVERLAY_WINDOWS

android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION

android.permission.POST_NOTIFICATIONS

android.permission.RUN_USER_INITIATED_JOBS

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES