Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Rule For MT-protector #206

Closed
apkunpacker opened this issue Jan 13, 2020 · 7 comments
Closed

Add Rule For MT-protector #206

apkunpacker opened this issue Jan 13, 2020 · 7 comments
Assignees
@enovella
Labels
detection-issue Bad detection or no detection

Comments

@apkunpacker
Copy link
Contributor

apkunpacker commented Jan 13, 2020 •
edited
Loading

Add Rule For Mt Protector

MT-Manager 2.8.5.apk.zip

more sample at
https://www.apkmonk.com/app/bin.mt.plus/
@apkunpacker apkunpacker added the detection-issue Bad detection or no detection label Jan 13, 2020
@enovella enovella self-assigned this Jan 13, 2020
@enovella
Copy link
Collaborator

Many thanks for opening the ticket, I will create a rule for these two samples. Can you provide more samples? Do you know something else apart from this URL? Have you already found a unique and detectable pattern to fingerprint?

Cheers

@CalebFenton
Copy link
Member

@apkunpacker If I understand what you're saying, this is not a protector, but just a particular app's obfuscation. If this obfuscation isn't created by a tool that could be used on multiple apps, it's not worth fingerprinting. If it only detects a particular app, it doesn't add any information.

Please correct me if I'm wrong.

@enovella
Copy link
Collaborator

enovella commented Jan 14, 2020 •
edited
Loading

The MT_Manager_2_8_5-beta.apk obfuscation is way different from the other apk. Are you sure about your assumptions?

Screenshot from 2020-01-14 13-44-21

The native library is hidden::
Screenshot from 2020-01-14 14-03-14

The older version is definitely obfuscated with something:
bin.mt.plus_2019-06-04.zip

Screenshot from 2020-01-14 13-51-11

@apkunpacker apkunpacker changed the title [New Protector] Add Rule For MT-Protector Empty Jan 28, 2020
@enovella enovella reopened this Jan 28, 2020
@apkunpacker apkunpacker changed the title Empty Add Rule For MT-protector Jan 30, 2020
@apkunpacker apkunpacker reopened this Jan 30, 2020
@apkunpacker
Copy link
Contributor Author

The MT_Manager_2_8_5-beta.apk obfuscation is way different from the other apk.

My mistake i upload just by downloading, didnot check that apk , actually that was fake apk so you get different obfuscation. Made correction in post . Uploaded real apk

@apkunpacker
Copy link
Contributor Author

fundump.apk.zip
Seems similer obfuscation

@apkunpacker apkunpacker mentioned this issue Mar 31, 2020
Open
@apkunpacker
Copy link
Contributor Author

MTObfuscation.apk.zip

@apkunpacker apkunpacker mentioned this issue Apr 1, 2020
Open
@apkunpacker
Copy link
Contributor Author

Closing in favor with
#189

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@enovella enovella

Labels
detection-issue Bad detection or no detection
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@CalebFenton @enovella @apkunpacker