Google IPTV_3[.]31[.]166(331166)[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
Google IPTV_3.31.166(331166).apk
Size 31.7MB
Sample260812-mx2z2asvbx
SHA256 49d34babe0d483bb1daa2c95a2076278847bc9f5d2491cce9814f078a6c4d4c3
MD5 2666fc3d724cd072d2bf880550a6ccc4
SHA1 aa0580f59d2c617397e4921ec69716d54aae0fdf
SHA512 c5fec69eed8f700e9eef2031bedacbd0a337e292ddc10b51b4d9cd2bd96d097a1f8edd05b57bd7ef60aa9d87062a8a91589ea463ab3907a0f92ef7caa7e449d6
SSDEEP 786432:CvI2tNdCzRk+wgmus/8tfzN2laiK6vjrcuvMK8GXU6kmi:CvI2tNdCzRk+wgmuQ8tZUNK6vjr53/UZ
TLSH
T16A772356EB4AAE6BF8F32676493A0631D15B2C658743D3C39E14323D64B3AE00F47AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 2 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 36 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Google IPTV_3.31.166(331166).apk

File Explorer

Google IPTV_3.31.166(331166).apk

.apk 31.7MB

Google IPTV_3.31.166(331166).apk

SHA256 49d34babe0d483bb1daa2c95a2076278847bc9f5d2491cce9814f078a6c4d4c3
MD5 2666fc3d724cd072d2bf880550a6ccc4
SHA1 aa0580f59d2c617397e4921ec69716d54aae0fdf
SHA512 c5fec69eed8f700e9eef2031bedacbd0a337e292ddc10b51b4d9cd2bd96d097a1f8edd05b57bd7ef60aa9d87062a8a91589ea463ab3907a0f92ef7caa7e449d6
SSDEEP 786432:CvI2tNdCzRk+wgmus/8tfzN2laiK6vjrcuvMK8GXU6kmi:CvI2tNdCzRk+wgmuQ8tZUNK6vjr53/UZ
TLSH
T16A772356EB4AAE6BF8F32676493A0631D15B2C658743D3C39E14323D64B3AE00F47AD4
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

9361c097076135964e47590f15df14a6a03341585e2e9fa7f2464686e4b5fb69

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=WUMMYTE 3TEES & CO LTD

com.budge.alleger2689

android.permission.SYSTEM_ALERT_WINDOW android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.MANAGE_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.CAMERA android.permission.RECORD_AUDIO android.permission.READ_CONTACTS android.permission.WRITE_CONTACTS android.permission.SEND_SMS android.permission.READ_PHONE_NUMBERS android.permission.READ_SMS android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_BACKGROUND_LOCATION android.permission.CALL_PHONE android.permission.BIND_DEVICE_ADMIN com.budge.alleger2689.permission.PROFILE_BRIDGE android.permission.PACKAGE_USAGE_STATS android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.SYSTEM_ALERT_WINDOW android.permission.MANAGE_EXTERNAL_STORAGE android.permission.CAMERA android.permission.RECORD_AUDIO android.permission.READ_SMS android.permission.RECEIVE_SMS android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.MODIFY_AUDIO_SETTINGS android.permission.ACCESS_NOTIFICATION_POLICY android.permission.VIBRATE android.permission.WRITE_SETTINGS android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.FOREGROUND_SERVICE_CAMERA android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION android.permission.FOREGROUND_SERVICE_SPECIAL_USE android.permission.FOREGROUND_SERVICE_SYSTEM_EXEMPTED android.permission.RECEIVE_BOOT_COMPLETED android.permission.POST_NOTIFICATIONS android.permission.SCHEDULE_EXACT_ALARM android.permission.USE_EXACT_ALARM android.permission.WAKE_LOCK android.permission.REORDER_TASKS android.permission.QUERY_ALL_PACKAGES android.permission.REQUEST_DELETE_PACKAGES android.permission.REQUEST_INSTALL_PACKAGES android.permission.GET_ACCOUNTS android.permission.AUTHENTICATE_ACCOUNTS android.permission.WRITE_SYNC_SETTINGS android.permission.WRITE_CONTACTS android.permission.READ_PHONE_NUMBERS android.permission.READ_PHONE_STATE android.permission.READ_CONTACTS android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.CALL_PHONE android.permission.WRITE_SECURE_SETTINGS android.permission.INTERACT_ACROSS_USERS android.permission.USE_BIOMETRIC android.permission.USE_FINGERPRINT com.budge.alleger2689.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.budge.alleger2689.ui.cc4ba5b603b1fb30a8555

com.budge.alleger2689.ui.c88c789624f9c87134c5f

com.budge.alleger2689.vpn.VpnPermissionActivity

com.budge.alleger2689.realtime.c283cf401ab5bf6310f85

com.budge.alleger2689.camera.c6637d1e13a02e98dfcf9

com.budge.alleger2689.ui.cd2ca5e57a25148a5c6a2

com.budge.alleger2689.ui.c241734df783bd633ce85

com.budge.alleger2689.ui.cf970df8ed85a5502de5b

com.budge.alleger2689.keep_alive.c7722f417192cbdd18afe

com.budge.alleger2689.accessibility.c3fe13ab58881b6e8694a

com.budge.alleger2689.accessibility.cd9353a6062d741c96501

com.budge.alleger2689.accessibility.c06e38dbabba43f1a6233

com.budge.alleger2689.accessibility.c3d02faf790f8892df5ed

com.budge.alleger2689.clone.BACK_LOAD com.budge.alleger2689.clone.BACK_SYNC com.budge.alleger2689.clone.BACK_ALERT

com.budge.alleger2689.clone.CloneLaunchActivity

com.budge.alleger2689.clone.LAUNCH

com.budge.alleger2689.clone.CloneSetupActivity

com.budge.alleger2689.clone.SETUP com.budge.alleger2689.clone.LOAD com.budge.alleger2689.clone.CLONE com.budge.alleger2689.clone.UNINSTALL com.budge.alleger2689.clone.REFRESH com.budge.alleger2689.clone.DESTROY

com.budge.alleger2689.clone.c64d5ca890708115fabfb

com.budge.alleger2689.clone.CloneOperationActivity

com.budge.alleger2689.clone.INTERNAL_SETUP com.budge.alleger2689.clone.INTERNAL_LOAD com.budge.alleger2689.clone.INTERNAL_CLONE com.budge.alleger2689.clone.INTERNAL_UNINSTALL com.budge.alleger2689.clone.INTERNAL_REFRESH com.budge.alleger2689.clone.INTERNAL_DESTROY com.budge.alleger2689.clone.INSTALL_RESULT com.budge.alleger2689.clone.UNINSTALL_RESULT

com.budge.alleger2689.accessibility.caacf4cb3cfc5b30b4f98

com.budge.alleger2689.accessibility.cb113141ba2747be3a9bd

com.budge.alleger2689.inject.c0f6e262e62b135d66718

com.budge.alleger2689.lockscreen.c27531589d27b323bce7e

com.budge.alleger2689.broadcast.caef0a813c8ac776b44ea

com.budge.alleger2689.broadcast.c8605f25187db32711d60

com.budge.alleger2689.clone.ce297b5398d4c1224edcf

com.budge.alleger2689.services.c75d8309c6ddff36d3c29

com.globalnew.botreceiver.ACTION_START com.budge.alleger2689.action.DROPPER_READY android.intent.action.BOOT_COMPLETED android.intent.action.LOCKED_BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.MY_PACKAGE_REPLACED

com.budge.alleger2689.app_management.cc991343091353fbf597c

com.hermes.apps.action.REPLACEMENT_INSTALL_PREPARED com.hermes.apps.action.REPLACEMENT_INSTALL_SUBMITTED com.hermes.apps.action.REPLACEMENT_INSTALL_USER_ACTION_REQUIRED com.hermes.apps.action.REPLACEMENT_INSTALL_RESULT

com.budge.alleger2689.services.c5464f4b5ab5b681ee25d

MY_CUSTOM_ACTION com.budge.alleger2689.action.KEEPALIVE_TICK

com.budge.alleger2689.services.ServiceResetReceiver

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.LOCALE_CHANGED android.intent.action.TIMEZONE_CHANGED android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.SCREEN_ON android.intent.action.SCREEN_OFF android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE

com.budge.alleger2689.services.SmsSignalReceiver

android.provider.Telephony.SMS_RECEIVED android.provider.Telephony.SMS_DELIVER

com.budge.alleger2689.accessibility.cd32e80a2b65f69b62e8f

android.app.action.DEVICE_ADMIN_ENABLED android.intent.action.ACTION_SHUTDOWN android.intent.action.USER_PRESENT android.intent.action.SCREEN_OFF android.intent.action.SCREEN_ON

com.budge.alleger2689.clone.c9daf98578658119af59b

android.app.action.DEVICE_ADMIN_ENABLED android.app.action.PROFILE_PROVISIONING_COMPLETE

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

Google IPTV_3.31.166(331166).apk

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.SEND_SMS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_SMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.CALL_PHONE

android.permission.BIND_DEVICE_ADMIN

com.budge.alleger2689.permission.PROFILE_BRIDGE

android.permission.PACKAGE_USAGE_STATS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_CAMERA

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.FOREGROUND_SERVICE_SYSTEM_EXEMPTED

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.POST_NOTIFICATIONS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_EXACT_ALARM

android.permission.WAKE_LOCK

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

Sharing

General

Malware Config

Signatures

File Explorer

Google IPTV_3.31.166(331166).apk

File Signature issue

com.budge.alleger2689.ui.cc4ba5b603b1fb30a8555

com.budge.alleger2689.ui.c88c789624f9c87134c5f

com.budge.alleger2689.vpn.VpnPermissionActivity

com.budge.alleger2689.realtime.c283cf401ab5bf6310f85

com.budge.alleger2689.camera.c6637d1e13a02e98dfcf9

com.budge.alleger2689.ui.cd2ca5e57a25148a5c6a2

com.budge.alleger2689.ui.c241734df783bd633ce85

com.budge.alleger2689.ui.cf970df8ed85a5502de5b

com.budge.alleger2689.keep_alive.c7722f417192cbdd18afe

com.budge.alleger2689.accessibility.c3fe13ab58881b6e8694a

com.budge.alleger2689.accessibility.cd9353a6062d741c96501

com.budge.alleger2689.accessibility.c06e38dbabba43f1a6233

com.budge.alleger2689.accessibility.c3d02faf790f8892df5ed

com.budge.alleger2689.clone.CloneLaunchActivity

com.budge.alleger2689.clone.CloneSetupActivity

com.budge.alleger2689.clone.c64d5ca890708115fabfb

com.budge.alleger2689.clone.CloneOperationActivity

com.budge.alleger2689.accessibility.caacf4cb3cfc5b30b4f98

com.budge.alleger2689.accessibility.cb113141ba2747be3a9bd

com.budge.alleger2689.inject.c0f6e262e62b135d66718

com.budge.alleger2689.lockscreen.c27531589d27b323bce7e

com.budge.alleger2689.broadcast.caef0a813c8ac776b44ea

com.budge.alleger2689.broadcast.c8605f25187db32711d60

com.budge.alleger2689.vpn.RuleVpnService

com.budge.alleger2689.services.c872abbf5f162a0ca0a2a

com.budge.alleger2689.services.cf3bcb04b1ad55b832e96

com.budge.alleger2689.services.c19f83cf0a0baebac0429

com.budge.alleger2689.camera.ced07ff82ed78425c2148

com.budge.alleger2689.services.c7485fdd3961521ef54a5

com.budge.alleger2689.services.c845145456845a66a69a8

com.budge.alleger2689.clone.CloneProfileService

com.budge.alleger2689.accessibility.ca6eb07effedcae2bc5a7

com.budge.alleger2689.accessibility.cf7c7a4d3a6e91894cc52

com.budge.alleger2689.accessibility.c69ef5074ad0f16647972

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.budge.alleger2689.clone.ce297b5398d4c1224edcf

com.budge.alleger2689.services.c75d8309c6ddff36d3c29

com.budge.alleger2689.app_management.cc991343091353fbf597c

com.budge.alleger2689.services.c5464f4b5ab5b681ee25d

com.budge.alleger2689.services.ServiceResetReceiver

com.budge.alleger2689.services.SmsSignalReceiver

com.budge.alleger2689.accessibility.cd32e80a2b65f69b62e8f

com.budge.alleger2689.clone.c9daf98578658119af59b

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

com.budge.alleger2689.privileged.PrivilegedDaemonProvider

androidx.startup.InitializationProvider

Android Permissions

Google IPTV_3.31.166(331166).apk