General

  • Target

    rethink-28.apk

  • Size

    48.9MB

  • MD5

    72eb72594df9d7ea3cd43a0ab0f751ad

  • SHA1

    5d61325d32c9023f45c7ad1e67fca8b84e0d8a15

  • SHA256

    fe117292941939cb06063f8391501f8a145b086dbabb5e6d536f5872191c85cb

  • SHA512

    ecac8ef88e057a67b76d752edb3b42c54e6715a9daa01afab3348a6751cef1644d7dde6c94c25ec6eec0824089949e8ca59fcf4d93f30f8ad94483310fcfb4a6

  • SSDEEP

    393216:hHaZ7L7MMTt2bq9XhkuWlV+kvhUwUJyNjyMVEYa20S8RPO7ZUwF:hHYTsm9Xhkf+5wUyj0S8RPO7DF

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • rethink-28.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.celzero.bravedns

    com.celzero.bravedns.ui.HomeScreenActivity


Android Permissions

rethink-28.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.POST_NOTIFICATIONS

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

android.permission.QUERY_ALL_PACKAGES

android.permission.INTERACT_ACROSS_USERS

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.WAKE_LOCK

com.celzero.bravedns.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION