com[.]imbaapp[.]vpn[.]apk

General

Target

com.imbaapp.vpn.apk
Size

15.8MB
MD5

38d633ca6349a76578b8bd7cea5196b4
SHA1

3b97b1bafe4e7ae00e8f709e6caac2b5f3442c31
SHA256

e7afb7af1fec77294b92fdd57ffeef38b5d711aed89e6c18647742e8f55c8ba7
SHA512

40a8547a8e66f056a76f63fa337888d3b4ba74192485f12d35061583f4bd7418ab6f3c6dc0d410f781fd6c415c5f2a2aed98bed5c3c9acd2521cf7d502c044d6
SSDEEP

393216:rbk98nQfZeNOcD8RhWKPOUucl22xR5CCwAfHqs:rbm8nY4ZMhWKPqSRwgB

Score

N/A

Malware Config

Signatures

Files

com.imbaapp.vpn.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.imbaapp.vpn

com.imbaapp.vpnapp.MainActivity

Activities

com.imbaapp.vpnapp.MainActivity

android.intent.action.MAIN

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.yandex.metrica.push.core.notification.MetricaPushDummyActivity

com.yandex.metrica.push.action.NOTIFICATION_ACTION

androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity

android.intent.action.MAIN

androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity

android.intent.action.MAIN

androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.FOREGROUND_SERVICE
com.google.android.gms.permission.AD_ID
android.permission.POST_NOTIFICATIONS
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
android.permission.VIBRATE
android.permission.ACCESS_WIFI_STATE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.REORDER_TASKS

Receivers

com.imbaapp.vpnapp.MetricaSilentPushReceiver

com.imbaapp.vpn.action.ymp.SILENT_PUSH_RECEIVE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.yandex.metrica.push.core.notification.MetricaPushBroadcastReceiver

com.yandex.metrica.push.action.NOTIFICATION_ACTION

com.yandex.metrica.push.core.notification.MetricaPushNotificationStatusChangeHandler

android.app.action.APP_BLOCK_STATE_CHANGED
android.app.action.NOTIFICATION_CHANNEL_BLOCK_STATE_CHANGED
android.app.action.NOTIFICATION_CHANNEL_GROUP_BLOCK_STATE_CHANGED

com.yandex.metrica.push.core.notification.TtlBroadcastReceiver

com.yandex.metrica.push.action.EXPIRED_BY_TTL_ACTION

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

Services

de.blinkt.openvpn.core.OpenVPNService

android.net.VpnService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.yandex.metrica.MetricaService

com.yandex.metrica.IMetricaService

com.yandex.metrica.ConfigurationService

com.yandex.metrica.configuration.ACTION_INIT

com.yandex.metrica.push.firebase.MetricaMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

com.imbaapp.vpn.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.AD_ID

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

android.permission.VIBRATE

android.permission.ACCESS_WIFI_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REORDER_TASKS

Sharing

General

Malware Config

Signatures

Files

com.imbaapp.vpn

com.imbaapp.vpnapp.MainActivity

Activities

com.imbaapp.vpnapp.MainActivity

com.facebook.CustomTabActivity

com.yandex.metrica.push.core.notification.MetricaPushDummyActivity

androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity

Permissions

Receivers

com.imbaapp.vpnapp.MetricaSilentPushReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.yandex.metrica.push.core.notification.MetricaPushBroadcastReceiver

com.yandex.metrica.push.core.notification.MetricaPushNotificationStatusChangeHandler

com.yandex.metrica.push.core.notification.TtlBroadcastReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

Services

de.blinkt.openvpn.core.OpenVPNService

com.google.firebase.messaging.FirebaseMessagingService

com.yandex.metrica.MetricaService

com.yandex.metrica.ConfigurationService

com.yandex.metrica.push.firebase.MetricaMessagingService

Android Permissions

com.imbaapp.vpn.apk