XüperTV_4[.]34[.]5[.]apk

General

Target
XüperTV_4.34.5.apk
Size 35.8MB
Sample261102-k31m2ssset
SHA256 ebdf1dbf839e4c836450b6ff62af3a74c88b6d96cc5fed0f4441e1f9a87671e1
MD5 d6b19fbf3d8981d7011b3ebf5c745ee6
SHA1 4faf9016d80844e9faa0febd2770a1f302af0e22
SHA512 ede91a61243e80cb1cedd5bd786f356f54e68f4a2114e66e76c0b093c9276e1e0e80f8da4bff57faa4e4bcddb29de36c2c5187e4818323e66a2b7215002fc338
SSDEEP 786432:Xqu/K4BlecBJPoTAhihqBr3h9SkiOuzo12CF8p7UwIV5DYLG77JZ+:slGSJ8Br3ikiOQo19+APVRb7H+
TLSH
T10E871241B214A83FDCEE72317EA60637810B0FC4DA429FCBAE1BB1651B72795F945D82
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
XüperTV_4.34.5.apk

File Explorer

XüperTV_4.34.5.apk

.apk 35.8MB

XüperTV_4.34.5.apk

SHA256 ebdf1dbf839e4c836450b6ff62af3a74c88b6d96cc5fed0f4441e1f9a87671e1
MD5 d6b19fbf3d8981d7011b3ebf5c745ee6
SHA1 4faf9016d80844e9faa0febd2770a1f302af0e22
SHA512 ede91a61243e80cb1cedd5bd786f356f54e68f4a2114e66e76c0b093c9276e1e0e80f8da4bff57faa4e4bcddb29de36c2c5187e4818323e66a2b7215002fc338
SSDEEP 786432:Xqu/K4BlecBJPoTAhihqBr3h9SkiOuzo12CF8p7UwIV5DYLG77JZ+:slGSJ8Br3ikiOQo19+APVRb7H+
TLSH
T10E871241B214A83FDCEE72317EA60637810B0FC4DA429FCBAE1BB1651B72795F945D82
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

789967199ef25d6af4a220379c92094cf225f8926beeab6739bdfaeba74c6466

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=NoFace,O=X1X,C=MX

com.mod.x1x

com.interactive.brasiliptv.ui.activity.WelcomeActivity

android.intent.action.MAIN

com.interactive.brasiliptv.ui.activity.GuidePageActivity

com.main.ui.activity.HomeActivity

com.vod.ui.activity.VodDetailsActivity

com.vod.ui.activity.VodCategoryActivity

com.vod.ui.activity.VodSearchActivity

com.vod.ui.activity.RestrictLevelSearchActivity

com.vod.ui.activity.TopicActivity

com.vod.ui.activity.TopicMoreActivity

com.vod.ui.activity.ActorDetailsActivity

com.vod.ui.activity.KidsCategoryActivity

com.vod.ui.activity.FilterActivity

com.live.ui.activity.LiveFreeActivity

com.live.ui.activity.LiveVoiceSearchActivity

com.live.ui.activity.MatchScheduleActivity

com.live.ui.activity.MatchDetailActivity

com.live.ui.activity.MatchCategoryActivity

com.live.ui.activity.MatchRankCategoryActivity

com.live.ui.activity.LiveNewVoiceSearchActivity

com.mine.ui.activity.UserCenterActivity

com.mine.ui.activity.AccountSecurityActivity

com.mine.ui.activity.MyRecordActivity

com.mine.ui.activity.PurchaseActivity

com.mine.ui.activity.PersonalMoreActivity

com.mine.ui.activity.OrderHistoryActivity

com.mine.ui.activity.DisplayQRCodeActivity

com.mine.ui.activity.EventCenterActivity

com.mine.ui.activity.InviteFriendsActivity

com.mine.ui.activity.SettingsActivity

com.login.ui.activity.ForcePasswordChangeActivity

com.module.ui.activity.CommonWebActivity

com.module.ui.activity.WebActivity

com.google.android.gms.common.api.GoogleApiActivity

Android Permissions

XüperTV_4.34.5.apk

Permissions

com.google.android.gms.permission.AD_ID

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.READ_MEDIA_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Sharing

General

Malware Config

Signatures

File Explorer

XüperTV_4.34.5.apk

File Signature issue

com.interactive.brasiliptv.ui.activity.WelcomeActivity

com.interactive.brasiliptv.ui.activity.GuidePageActivity

com.main.ui.activity.HomeActivity

com.vod.ui.activity.VodDetailsActivity

com.vod.ui.activity.VodCategoryActivity

com.vod.ui.activity.VodSearchActivity

com.vod.ui.activity.RestrictLevelSearchActivity

com.vod.ui.activity.TopicActivity

com.vod.ui.activity.TopicMoreActivity

com.vod.ui.activity.ActorDetailsActivity

com.vod.ui.activity.KidsCategoryActivity

com.vod.ui.activity.FilterActivity

com.live.ui.activity.LiveFreeActivity

com.live.ui.activity.LiveVoiceSearchActivity

com.live.ui.activity.MatchScheduleActivity

com.live.ui.activity.MatchDetailActivity

com.live.ui.activity.MatchCategoryActivity

com.live.ui.activity.MatchRankCategoryActivity

com.live.ui.activity.LiveNewVoiceSearchActivity

com.mine.ui.activity.UserCenterActivity

com.mine.ui.activity.AccountSecurityActivity

com.mine.ui.activity.MyRecordActivity

com.mine.ui.activity.PurchaseActivity

com.mine.ui.activity.PersonalMoreActivity

com.mine.ui.activity.OrderHistoryActivity

com.mine.ui.activity.DisplayQRCodeActivity

com.mine.ui.activity.EventCenterActivity

com.mine.ui.activity.InviteFriendsActivity

com.mine.ui.activity.SettingsActivity

com.login.ui.activity.ForcePasswordChangeActivity

com.module.ui.activity.CommonWebActivity

com.module.ui.activity.WebActivity

com.google.android.gms.common.api.GoogleApiActivity

com.interactive.brasiliptv.service.MyFirebaseMessagingService

com.main.service.GoMediaService

com.module.receiver.ReportService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.messaging.FirebaseMessagingService

io.appmetrica.analytics.internal.AppMetricaService

com.taobao.accs.ChannelService

com.taobao.accs.data.MsgDistributeService

org.android.agoo.accs.AgooService

com.umeng.message.UmengIntentService

com.umeng.message.XiaomiIntentService

com.umeng.message.UmengMessageIntentReceiverService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.bytedance.boost_multidex.OptimizeService

com.qiniu.android.dns.NetworkReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.taobao.accs.EventReceiver

com.taobao.accs.ServiceReceiver

com.taobao.agoo.AgooCommondReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.mobile.provider.DownloadFileProvider

com.therouter.InnerTheRouterContentProvider

io.appmetrica.analytics.internal.PreloadInfoContentProvider

androidx.startup.InitializationProvider

com.secneo.apkwrapper.CP

Android Permissions

XüperTV_4.34.5.apk