Rewatch+LIVE_+Save+Live+Stream_1.0.28_APKPure.xapk
- SHA256 2ae8f61d7d67bf02bd82f9b282bffd444d8b0a9eafa9b2281282825235f6818a
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
com.reactish.rewatchlive2.apk
Resource
android-34-x64-arm64-20260325.1-en
android-14-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
config.arm64_v8a.jar
Resource
android-34-x64-arm64-20260325.1-en
android-14-x64
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
config.en.jar
Resource
android-34-x64-arm64-20260325.1-en
android-14-x64
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
config.fr.jar
Resource
android-34-x64-arm64-20260325.1-en
android-14-x64
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
config.mdpi.jar
Resource
android-34-x64-arm64-20260325.1-en
android-14-x64
0 signatures
900 seconds
General
- Target Rewatch+LIVE_+Save+Live+Stream_1.0.28_APKPure.xapk
- Size 38.7MB
- Sample261007-btzvqaav6v
- SHA256 2ae8f61d7d67bf02bd82f9b282bffd444d8b0a9eafa9b2281282825235f6818a
- MD5 94da4ba79afbf760783bd4a3031049de
- SHA1 276e2e188ad39d4b0cae06840550638c37962df0
- SHA512 fd631d77cc50d2e5291a1a72d8aaed019195a32f24df72acfc43a51de913bd0f5bb02da4133d555331b0c672e5c286f94ac2f9d244cc81c71986c4081ab83c2a
- SSDEEP 393216:JgWn5c8QcB9/9pZcsMC+jZYuPoL4ZrqVeztO2r2HNKVgwldBiixRyn:+8Qe8g+VPc2kHuZtUn
- TLSH T18097BF0ED50DD932D9CFF23C9D6A0B53B23574A507A6C21B681DD188FF877E04AA2B91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests dangerous framework permissions 3 IoCs
description ioc Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE - Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/config.mdpi.apk - Insecure Codesign Algorithm 4 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/config.arm64_v8a.apk unpack001/config.en.apk unpack001/config.fr.apk unpack001/config.mdpi.apk - Untrusted Codesign Signers 4 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/config.arm64_v8a.apk unpack001/config.en.apk unpack001/config.fr.apk unpack001/config.mdpi.apk
File Explorer
-
Rewatch+LIVE_+Save+Live+Stream_1.0.28_APKPure.xapk.zip 38.7MB
-
com.reactish.rewatchlive2.apk.apk 8.5MB
-
config.arm64_v8a.apk.jar 30.0MB
-
config.en.apk.jar 36KB
-
config.fr.apk.jar 24KB
-
config.mdpi.apk.jar 69KB
-
icon.png.png 59KB
-
manifest.json1KB
com.reactish.rewatchlive2.apk
- SHA256 579d1db455e4ba6da7e5c2e3d835340ecca0b1ff7daebebdde0088d9934b16cb
- MD5 0dd963530a523f42ccc4ca4978ca58b8
- SHA1 d8cf5cf0af1b015ded5d29188da16bd732a09c1c
- SHA512 edca683f2bc26da27c12f16597003630ff957ca187040e55234ab7e6827247f2a7e98f1a2e3cd2579a3b5a689c39196962c0ee7d6f6603cce04e71f3e5f99174
- SSDEEP 98304:ggW7Ki17jbffOl7X/qc8R+VYvkd6efr7ZyQK2L8WcwUhLip:ggCVnyl7Cc8QYMdJ0B9e
- TLSH T19796AD0BD3521E74C4AEA33998B387053B356A877F47236614C9E6FABC672D15FD8280
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
b5f82e2703b16b3d0219cb77bb479051ca3c413d43ffdb17ee180083fbf2baa6147ecdcf61d8dd764938ca8486ad216a12a5b737f65fe28b1991c77fd38339fc
Digest Algorithm
sha512
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
64:82:e1:f9:1c:65:71:b6:ae:ba:10:5f:c2:38:58:6f:6f:a1:9a:41
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Oct 19, 2024 - Oct 19, 2054
com.reactish.rewatchlive2
com.reactish.rewatchlive2.MainActivity
android.permission.INTERNET
android.permission.POST_NOTIFICATIONS
com.google.android.gms.permission.AD_ID
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
com.google.android.c2dm.permission.RECEIVE
com.android.vending.BILLING
com.reactish.rewatchlive2.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.reactish.rewatchlive2.MainActivity
android.intent.action.MAIN
android.intent.action.VIEW
com.revenuecat.purchases.amazon.purchasing.ProxyAmazonBillingActivity
io.flutter.plugins.urllauncher.WebViewActivity
com.android.billingclient.api.ProxyBillingActivity
com.android.billingclient.api.ProxyBillingActivityV2
com.google.android.gms.common.api.GoogleApiActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService
io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.google.firebase.components.ComponentDiscoveryService
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
com.bbflight.background_downloader.NotificationReceiver
com.bbflight.background_downloader.cancelActive
com.bbflight.background_downloader.pause
com.bbflight.background_downloader.resume
com.amazon.device.iap.ResponseReceiver
com.amazon.inapp.purchasing.NOTIFY
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver
com.google.android.c2dm.intent.RECEIVE
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.bbflight.background_downloader.OpenFileProvider
androidx.startup.InitializationProvider
io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider
com.google.firebase.provider.FirebaseInitProvider
config.arm64_v8a.apk
- SHA256 674721a5da7141bed3acddc2f6fd596cfa85556a667d6c4c9ac648bddea83b6a
- MD5 ac8dc81ef5bed300f6f36ba5e8e045ad
- SHA1 9fbfb0e2fd5796cf40f9b5e2e44e5cc25eb4ef1d
- SHA512 6aed5f7121f9ec80f9aad5a207e5e6b01cdf83d9cc814fbb0525112f569c3d1808b175e4f068b6a474740af3784696297bee04f63d43ac3e37c30339070a8bdf
- SSDEEP 393216:K9pZcsMC+jZYuPoL4ZrqVeztO2r2HNKVgwldBiixRyH:Dg+VPc2kHuZtUH
- TLSH T134679E0ED50DD932E9CFF07C9E6A0B63F139B46442A5C05B792E9148FB876F045B2B92
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
174a9bcef18cb67adfa76f4830cff059b029e694
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
64:82:e1:f9:1c:65:71:b6:ae:ba:10:5f:c2:38:58:6f:6f:a1:9a:41
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Oct 19, 2024 - Oct 19, 2054
config.en.apk
- SHA256 dfaa694dcc1d7e969233e7d6a0160cecb890da7588734655f1ca6a9d1f8d7699
- MD5 773d2198a71de22e069884cfd6206775
- SHA1 8c9786be5ef7f04aa2a7d7e71092ad2ebf7313ef
- SHA512 3da4d63da78d3f6bae11217979f53039b16516263269e201dfe977ee21cdf4028ed70e3604a8e9d036cf1d31964d0906d6da4ad3932c286aaa12471e2e1c115d
- SSDEEP 384:mqSVKo0aSRshLQOIQEQ2QF16YpVxUHN5RVl7p/+VbJLtsd:mD6shl1JUHN5RV3/ysd
- TLSH T1EFF20606FB46961FCD3705315C9B82866426BD07CE454A0BE6B1BB4C28FBBC98F522F4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
436853749e68636cfe808383482a005514cc687a
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
64:82:e1:f9:1c:65:71:b6:ae:ba:10:5f:c2:38:58:6f:6f:a1:9a:41
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Oct 19, 2024 - Oct 19, 2054
config.fr.apk
- SHA256 55ceb669fd9a2a585e83ef0c673a0d1556df2450ec4a28aba545183eb5fb791e
- MD5 8017e72aff10719b956753da7a0e8d50
- SHA1 627a9687fbc1425857d5b556267705940184e0ed
- SHA512 e6b82a304015fa90e99f1614481090cac24e962a9a0c105351b33f84dd22ca49092f77687c113aa1fe70b6743190a816cacd9a0b7e095c35fcb1251781ba5e9d
- SSDEEP 384:f1MFuSzSTZSRshAbwK9L5eyxd7jvlL+V4GVc+D:HSmTZ6shdcjvB2VJ
- TLSH T170B24C46FEC2B62FDC7B52355AA7D3456539CC084A811B4A46A0B30D34FBFD887872D5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
633c871039e5cd5e6ceb7bc013071a7ee0ffdeb2
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
64:82:e1:f9:1c:65:71:b6:ae:ba:10:5f:c2:38:58:6f:6f:a1:9a:41
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Oct 19, 2024 - Oct 19, 2054
config.mdpi.apk
- SHA256 eb381b6a3a345cc869526db8200b1113f8acb3f30025cfb0c071cc01612030ce
- MD5 bb997a0702f219060af9db95a582f4e7
- SHA1 6f30a5338b1793a4f1c17c4ea2d68c7582236af6
- SHA512 63f5d4c1ea5103f50b3ca73c2cfffe0a57e8eed6f15ab927633a3ccb3e1a82b77333e3513082d6f9768e97568e11ccf9eac07af84b849eb1046ca2e6f8e8f7c7
- SSDEEP 1536:VkWurljvB03LJPF8kAkSa4zR0XTY4qo5lfjSyfIdR+W:9urJvB07okbSa4zR2qIRjSKIdx
- TLSH T154637DA3E378A427E863463A42B81F968D154D54956DDB3E0A26F28CCFFFE418580FC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
894de9338606bd1c392f48fc0a4281030095314e
Digest Algorithm
sha1
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
64:82:e1:f9:1c:65:71:b6:ae:ba:10:5f:c2:38:58:6f:6f:a1:9a:41
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Oct 19, 2024 - Oct 19, 2054
icon.png
- SHA256 a0541e5cbb60cef2763bad2949b69578a95ae10d06d901f02135af05d8c9b4f6
- MD5 889304a75af4ba343182e315cba5be19
- SHA1 f918c3062e78b90ab67f3498b017b09eda2c6cc2
- SHA512 46d5faee4b9274f3dbc1c8e1287ea2f033923533819b0a2cc7f888b902513f030562e0d71908cec562259803d48cb6497afe80d13014512b447724c40fbeb038
- SSDEEP 1536:xla1dzqRsC7FOqOsREd9D83M1q7q5NQFUxr:eqCCwX8c13N4er
- TLSH T1D6530287E3674EDD3D114CA7796C42729076F0B3C04CA3C48F95B2B34856985ABBEAE4
- MD5 SHA1 SHA512 SSDEEP TLSH
manifest.json
- SHA256 0ec6551942e4ec3293141dced5278d36b9b1104c141c427cba3ce59fadfe35ab
- MD5 30c799eb89b5e930a7c8a5ed52cdd2d6
- SHA1 d4da05c66bb87e7b9c942da86f7768e3927d95fb
- SHA512 e49b4e84ff64d1b2df32de1e45920b625db09455a8d54f8a57d02167233e5b98f191c686b369ec1203cc1ef1f804f79f8eacde63d5ae1915cba8357e2c4d580d
- TLSH T18F1124335E2C8E77AA5CFEE1B13C04C85DBA0B8211E425DD8E8AEE50371E9811581BA5
- MD5 SHA1 SHA512 TLSH