Xuper 4[.]34[.]5[.]apk

General

Target
Xuper 4.34.5.apk
Size 33.6MB
Sample260722-e4z51svzbv
SHA256 2b098adf19eab4ac0eaf11501ebf386561677b2c95cc1f0499811bb81a058bb5
MD5 ee04031de87f9c6ba8952228ceb4b2c7
SHA1 5eeea5a5401c35223e2b151df8957945c1a10227
SHA512 c078668f2b6cc03f32415194c59f09b452e8befc19ca4e61aeb8eca288893af410e35a7d564cb68113e82a42f00739355ef1a777fab676162c935f9c247b7388
SSDEEP 393216:XYaZRZMNjPc2XlG6X26UXhdSgz57v2SU4zpMU8BCr/s5xW7ylfhtPBlcUiWaGFEF:XYQT2Xwegt72WoxWGlvUUiWaGqRR7vzH
TLSH
T195773387FB6CE92AD0B715708FEE5221A6270D104B01660B754CBA593A73ADC4F8E7C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

upx

Malware Config

Signatures

Patched UPX-packed file 1 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
sample	patched_upx

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Xuper 4.34.5.apk

File Explorer

Xuper 4.34.5.apk

.apk 33.6MB

Xuper 4.34.5.apk

SHA256 2b098adf19eab4ac0eaf11501ebf386561677b2c95cc1f0499811bb81a058bb5
MD5 ee04031de87f9c6ba8952228ceb4b2c7
SHA1 5eeea5a5401c35223e2b151df8957945c1a10227
SHA512 c078668f2b6cc03f32415194c59f09b452e8befc19ca4e61aeb8eca288893af410e35a7d564cb68113e82a42f00739355ef1a777fab676162c935f9c247b7388
SSDEEP 393216:XYaZRZMNjPc2XlG6X26UXhdSgz57v2SU4zpMU8BCr/s5xW7ylfhtPBlcUiWaGFEF:XYQT2Xwegt72WoxWGlvUUiWaGqRR7vzH
TLSH
T195773387FB6CE92AD0B715708FEE5221A6270D104B01660B754CBA593A73ADC4F8E7C7
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm

Patched UPX-packed file

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

4ace05fea235302f65126ba3e2d6a362f21e519adfa1893ad605002843c4225f

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=sgm,OU=sgmtv,O=sgmtv,L=WDC,ST=Vienna,C=1

com.android.mgstv

com.interactive.brasiliptv.ui.activity.WelcomeActivity

android.intent.action.MAIN

com.interactive.brasiliptv.ui.activity.GuidePageActivity

com.main.ui.activity.HomeActivity

com.vod.ui.activity.VodDetailsActivity

com.vod.ui.activity.VodCategoryActivity

com.vod.ui.activity.VodSearchActivity

com.vod.ui.activity.RestrictLevelSearchActivity

com.vod.ui.activity.TopicActivity

com.vod.ui.activity.TopicMoreActivity

com.vod.ui.activity.ActorDetailsActivity

com.vod.ui.activity.KidsCategoryActivity

com.vod.ui.activity.FilterActivity

com.live.ui.activity.LiveFreeActivity

com.live.ui.activity.LiveVoiceSearchActivity

com.live.ui.activity.MatchScheduleActivity

com.live.ui.activity.MatchDetailActivity

com.live.ui.activity.MatchCategoryActivity

com.live.ui.activity.MatchRankCategoryActivity

com.live.ui.activity.LiveNewVoiceSearchActivity

com.mine.ui.activity.UserCenterActivity

com.mine.ui.activity.AccountSecurityActivity

com.mine.ui.activity.MyRecordActivity

com.mine.ui.activity.PurchaseActivity

com.mine.ui.activity.PersonalMoreActivity

com.mine.ui.activity.OrderHistoryActivity

com.mine.ui.activity.DisplayQRCodeActivity

com.mine.ui.activity.EventCenterActivity

com.mine.ui.activity.InviteFriendsActivity

com.mine.ui.activity.SettingsActivity

com.login.ui.activity.ForcePasswordChangeActivity

com.module.ui.activity.CommonWebActivity

com.module.ui.activity.WebActivity

com.google.android.gms.common.api.GoogleApiActivity

com.umeng.message.component.UmengNotificationClickActivity

com.umeng.message.notify.UPushMessageNotifyActivity

com.interactive.brasiliptv.service.MyFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.main.service.GoMediaService

com.module.receiver.ReportService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

io.appmetrica.analytics.internal.AppMetricaService

io.appmetrica.analytics.IAppMetricaService

com.taobao.accs.ChannelService

com.taobao.accs.intent.action.START_SERVICE com.taobao.accs.intent.action.ELECTION

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.intent.action.RECEIVE

org.android.agoo.accs.AgooService

com.taobao.accs.intent.action.RECEIVE

com.umeng.message.UmengIntentService

com.umeng.message.XiaomiIntentService

com.umeng.message.UmengMessageIntentReceiverService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.bytedance.boost_multidex.OptimizeService

com.umeng.message.component.UmengIntentService

org.agoo.android.intent.action.RECEIVE

com.umeng.message.component.UmengMessageReceiverService

org.android.agoo.client.MessageReceiverService

com.umeng.message.component.UmengMessageHandlerService

com.umeng.message.action

com.taobao.accs.ChannelService$KernelService

com.taobao.accs.internal.AccsJobService

Android Permissions

Xuper 4.34.5.apk

Permissions

com.google.android.gms.permission.AD_ID

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.READ_MEDIA_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

Sharing

General

Malware Config

Signatures

File Explorer

Xuper 4.34.5.apk

File Signature issue

com.interactive.brasiliptv.ui.activity.WelcomeActivity

com.interactive.brasiliptv.ui.activity.GuidePageActivity

com.main.ui.activity.HomeActivity

com.vod.ui.activity.VodDetailsActivity

com.vod.ui.activity.VodCategoryActivity

com.vod.ui.activity.VodSearchActivity

com.vod.ui.activity.RestrictLevelSearchActivity

com.vod.ui.activity.TopicActivity

com.vod.ui.activity.TopicMoreActivity

com.vod.ui.activity.ActorDetailsActivity

com.vod.ui.activity.KidsCategoryActivity

com.vod.ui.activity.FilterActivity

com.live.ui.activity.LiveFreeActivity

com.live.ui.activity.LiveVoiceSearchActivity

com.live.ui.activity.MatchScheduleActivity

com.live.ui.activity.MatchDetailActivity

com.live.ui.activity.MatchCategoryActivity

com.live.ui.activity.MatchRankCategoryActivity

com.live.ui.activity.LiveNewVoiceSearchActivity

com.mine.ui.activity.UserCenterActivity

com.mine.ui.activity.AccountSecurityActivity

com.mine.ui.activity.MyRecordActivity

com.mine.ui.activity.PurchaseActivity

com.mine.ui.activity.PersonalMoreActivity

com.mine.ui.activity.OrderHistoryActivity

com.mine.ui.activity.DisplayQRCodeActivity

com.mine.ui.activity.EventCenterActivity

com.mine.ui.activity.InviteFriendsActivity

com.mine.ui.activity.SettingsActivity

com.login.ui.activity.ForcePasswordChangeActivity

com.module.ui.activity.CommonWebActivity

com.module.ui.activity.WebActivity

com.google.android.gms.common.api.GoogleApiActivity

com.umeng.message.component.UmengNotificationClickActivity

com.umeng.message.notify.UPushMessageNotifyActivity

com.interactive.brasiliptv.service.MyFirebaseMessagingService

com.main.service.GoMediaService

com.module.receiver.ReportService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.messaging.FirebaseMessagingService

io.appmetrica.analytics.internal.AppMetricaService

com.taobao.accs.ChannelService

com.taobao.accs.data.MsgDistributeService

org.android.agoo.accs.AgooService

com.umeng.message.UmengIntentService

com.umeng.message.XiaomiIntentService

com.umeng.message.UmengMessageIntentReceiverService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.bytedance.boost_multidex.OptimizeService

com.umeng.message.component.UmengIntentService

com.umeng.message.component.UmengMessageReceiverService

com.umeng.message.component.UmengMessageHandlerService

com.taobao.accs.ChannelService$KernelService

com.taobao.accs.internal.AccsJobService

com.qiniu.android.dns.NetworkReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.taobao.accs.EventReceiver

com.taobao.accs.ServiceReceiver

com.taobao.agoo.AgooCommondReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.umeng.message.component.UmengNotificationReceiver

com.mobile.provider.DownloadFileProvider

com.therouter.InnerTheRouterContentProvider

io.appmetrica.analytics.internal.PreloadInfoContentProvider

androidx.startup.InitializationProvider

com.umeng.message.component.UmengMessageProvider

Android Permissions