General

  • Target

    express-vpn-v10.10.0-kingmodapk.com.apk

  • Size

    20.3MB

  • MD5

    e6e34d8dd2e14d0c8569eae20df7cfd8

  • SHA1

    cebb89584ec5b6c747aa12643adda4fc36b3cfcd

  • SHA256

    b76da607b56178e04c6b18011f30ed8c98b5ab31cab16d76cd6a9eaf25da19c1

  • SHA512

    f343284e43c0ff28433f5ea9488e8cec55a410bd1e40943e1ea271b185fe600934cc09f66e9e7cb71d7a6cd7473efaa5386d4547a61441391c47c0c96872ec2b

  • SSDEEP

    393216:1tVAM9gslTTbVD9DksCLcD88R/aLkqVHJuY3UXcKph1Hnwv8RnxWmpYrtxzry:1tOMfTTbtVCLcDf/aLmY37KpPwv8RMmz

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • express-vpn-v10.10.0-kingmodapk.com.apk
    .apk android arch:arm64 arch:arm

    com.expressvpn.vpn

    com.expressvpn.vpn.ui.SplashActivity


Android Permissions

express-vpn-v10.10.0-kingmodapk.com.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

com.android.vending.BILLING

android.permission.VIBRATE

android.permission.BLUETOOTH

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.WAKE_LOCK

android.permission.READ_LOGS

android.permission.FLASHLIGHT

net.dinglisch.android.tasker.PERMISSION_RUN_TASKS

android.permission.BLUETOOTH_ADMIN

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.USE_FINGERPRINT

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.BLUETOOTH

android.permission.WRITE_SETTINGS

android.permission.READ_SETTINGS