Xuper_TV2[.]apk | Triage™

General

Target
Xuper_TV2.apk
Size 28.4MB
Sample260910-wq897ser2x
SHA256 4449646213ac7bff6bda5e6400207ee7d46e40c99f65ddddc23ec8620d1089cb
MD5 8fac21cca30b6c6ccfd336924ca62803
SHA1 587bb39216d06495bef2a8356262d560902dbdf3
SHA512 ae3ceafda9ecee3d20b3b4cc6b18ba2fe8bc4a33ad465513cff949ed9308e79946dd9a39cffd2a14830e126bb1ab5a5c752e06165a4ac6104be536861415242b
SSDEEP 393216:40JaeielglfR9I5lAKXlEZG1uW7cKtjC6jy87F+UGcApSUyB1yzXLnRUzdki:raeelfRiA4lEZG1CiDyaLXAFsOXriz5
TLSH
T1D4671242F7494825E5EA7AB4429F5371A6315D981B3285CB5A00F3243B736F8DF3ABC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Xuper_TV2.apk

File Explorer

Xuper_TV2.apk

.apk 28.4MB

Xuper_TV2.apk

SHA256 4449646213ac7bff6bda5e6400207ee7d46e40c99f65ddddc23ec8620d1089cb
MD5 8fac21cca30b6c6ccfd336924ca62803
SHA1 587bb39216d06495bef2a8356262d560902dbdf3
SHA512 ae3ceafda9ecee3d20b3b4cc6b18ba2fe8bc4a33ad465513cff949ed9308e79946dd9a39cffd2a14830e126bb1ab5a5c752e06165a4ac6104be536861415242b
SSDEEP 393216:40JaeielglfR9I5lAKXlEZG1uW7cKtjC6jy87F+UGcApSUyB1yzXLnRUzdki:raeelfRiA4lEZG1CiDyaLXAFsOXriz5
TLSH
T1D4671242F7494825E5EA7AB4429F5371A6315D981B3285CB5A00F3243B736F8DF3ABC2
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

823a4282740d957d408a23d71d900e03041fa6e7e9cbe1bda7d505c47b46ed62

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Epic,OU=Epic,O=Epic,L=CN,C=CN

com.xtv.x1x

com.interactive.brasiliptv.ui.activity.WelcomeActivity

android.intent.action.MAIN

com.interactive.brasiliptv.ui.activity.GuidePageActivity

com.main.ui.activity.HomeActivity

com.vod.ui.activity.VodDetailsActivity

com.vod.ui.activity.VodCategoryActivity

com.vod.ui.activity.VodSearchActivity

com.vod.ui.activity.RestrictLevelSearchActivity

com.vod.ui.activity.TopicActivity

com.vod.ui.activity.TopicMoreActivity

com.vod.ui.activity.ActorDetailsActivity

com.vod.ui.activity.KidsCategoryActivity

com.vod.ui.activity.FilterActivity

com.download.activity.DownloadActivity

com.download.activity.LocalPlayActivity

com.download.permission.OverlayActivity

com.live.ui.activity.LiveFreeActivity

com.live.ui.activity.LiveVoiceSearchActivity

com.live.ui.activity.MatchScheduleActivity

com.live.ui.activity.MatchDetailActivity

com.live.ui.activity.MatchCategoryActivity

com.live.ui.activity.MatchRankCategoryActivity

com.live.ui.activity.LiveNewVoiceSearchActivity

com.mine.ui.activity.UserCenterActivity

com.mine.ui.activity.OrderHistoryActivity

com.mine.ui.activity.DisplayQRCodeActivity

com.mine.ui.activity.EventCenterActivity

com.mine.ui.activity.InviteFriendsActivity

com.login.ui.activity.ForcePasswordChangeActivity

com.module.ui.activity.CommonWebActivity

com.module.ui.activity.WebActivity

com.google.android.gms.common.api.GoogleApiActivity

com.umeng.message.component.UmengNotificationClickActivity

com.umeng.message.notify.UPushMessageNotifyActivity

com.interactive.brasiliptv.service.MyFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.main.service.GoMediaService

com.module.receiver.ReportService

com.taobao.accs.ChannelService

com.taobao.accs.intent.action.START_SERVICE com.taobao.accs.intent.action.ELECTION

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.intent.action.RECEIVE

org.android.agoo.accs.AgooService

com.taobao.accs.intent.action.RECEIVE

com.umeng.message.UmengIntentService

com.umeng.message.XiaomiIntentService

com.umeng.message.UmengMessageIntentReceiverService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.bytedance.boost_multidex.OptimizeService

com.umeng.message.component.UmengIntentService

org.agoo.android.intent.action.RECEIVE

com.umeng.message.component.UmengMessageReceiverService

org.android.agoo.client.MessageReceiverService

com.umeng.message.component.UmengMessageHandlerService

com.umeng.message.action

com.taobao.accs.ChannelService$KernelService

com.taobao.accs.internal.AccsJobService

Android Permissions

Xuper_TV2.apk

Permissions

com.google.android.gms.permission.AD_ID

android.permission.WRITE_MEDIA_STORAGE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.READ_MEDIA_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

Sharing

General

Malware Config

Signatures

File Explorer

Xuper_TV2.apk

File Signature issue

com.interactive.brasiliptv.ui.activity.WelcomeActivity

com.interactive.brasiliptv.ui.activity.GuidePageActivity

com.main.ui.activity.HomeActivity

com.vod.ui.activity.VodDetailsActivity

com.vod.ui.activity.VodCategoryActivity

com.vod.ui.activity.VodSearchActivity

com.vod.ui.activity.RestrictLevelSearchActivity

com.vod.ui.activity.TopicActivity

com.vod.ui.activity.TopicMoreActivity

com.vod.ui.activity.ActorDetailsActivity

com.vod.ui.activity.KidsCategoryActivity

com.vod.ui.activity.FilterActivity

com.download.activity.DownloadActivity

com.download.activity.LocalPlayActivity

com.download.permission.OverlayActivity

com.live.ui.activity.LiveFreeActivity

com.live.ui.activity.LiveVoiceSearchActivity

com.live.ui.activity.MatchScheduleActivity

com.live.ui.activity.MatchDetailActivity

com.live.ui.activity.MatchCategoryActivity

com.live.ui.activity.MatchRankCategoryActivity

com.live.ui.activity.LiveNewVoiceSearchActivity

com.mine.ui.activity.UserCenterActivity

com.mine.ui.activity.OrderHistoryActivity

com.mine.ui.activity.DisplayQRCodeActivity

com.mine.ui.activity.EventCenterActivity

com.mine.ui.activity.InviteFriendsActivity

com.login.ui.activity.ForcePasswordChangeActivity

com.module.ui.activity.CommonWebActivity

com.module.ui.activity.WebActivity

com.google.android.gms.common.api.GoogleApiActivity

com.umeng.message.component.UmengNotificationClickActivity

com.umeng.message.notify.UPushMessageNotifyActivity

com.interactive.brasiliptv.service.MyFirebaseMessagingService

com.main.service.GoMediaService

com.module.receiver.ReportService

com.taobao.accs.ChannelService

com.taobao.accs.data.MsgDistributeService

org.android.agoo.accs.AgooService

com.umeng.message.UmengIntentService

com.umeng.message.XiaomiIntentService

com.umeng.message.UmengMessageIntentReceiverService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.bytedance.boost_multidex.OptimizeService

com.umeng.message.component.UmengIntentService

com.umeng.message.component.UmengMessageReceiverService

com.umeng.message.component.UmengMessageHandlerService

com.taobao.accs.ChannelService$KernelService

com.taobao.accs.internal.AccsJobService

com.taobao.accs.EventReceiver

com.taobao.accs.ServiceReceiver

com.taobao.agoo.AgooCommondReceiver

com.qiniu.android.dns.NetworkReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.umeng.message.component.UmengNotificationReceiver

com.therouter.InnerTheRouterContentProvider

com.mobile.provider.DownloadFileProvider

com.umeng.message.component.UmengMessageProvider

Android Permissions

Xuper_TV2.apk