General

  • Target

    com.mod.turbo.vpn.v3.9.3.23.9.3.2.apk

  • Size

    23.3MB

  • MD5

    18ee71e367c6eed6dafa1c6ed33099e0

  • SHA1

    7f00ccf607332cb0fcc9aaec6792e18d35f2921a

  • SHA256

    6ae86e10750ecbebfd3b0e1cd29787c65699e7a1ec964883b50caa58e77a398a

  • SHA512

    f7f4ad7d25faa5d57b9fe348b88b25370df00138c03793a945d6e883974ea3a36ae66ff1f12b54bd3330fb5ffb184a019c695f8b879d20cfbb53f51b1cf161ea

  • SSDEEP

    393216:e1790ZDge3i8iUdTtz4uHvctGvQr+PWV/wqyppkxyd3OyYKbs7SXHIOh:e16Zny8zdhz4GvqGW+uVYkxuDeAHd

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs

Files

  • com.mod.turbo.vpn.v3.9.3.23.9.3.2.apk
    .apk android arch:arm64

    free.vpn.unblock.proxy.turbovpn

    free.vpn.unblock.proxy.turbovpn.activity.StartupActivity


  • aaa_new.png
  • b1bbceaffd6c52a2
  • banner_all_config.json
  • built_in_proxy.json
  • bypass-china.acl
  • cert.pem
  • cid
    .elf linux x86
  • faq_ar.json
  • faq_default.json
  • faq_in.json
  • faq_ru.json
  • feedback_ar.json
  • feedback_default.json
  • help_center_article_style.css
  • iap_items_and_offers_all.json
  • img_0.png
    .png
  • in_app_message_local.json
  • language_en_to_ar.json
  • language_en_to_bn.json
  • language_en_to_de.json
  • language_en_to_en.json
  • language_en_to_es.json
  • language_en_to_fa.json
  • language_en_to_fr.json
  • language_en_to_hi.json
  • language_en_to_in.json
  • language_en_to_it.json
  • language_en_to_ja.json
  • language_en_to_ko.json
  • language_en_to_ms.json
  • language_en_to_my.json
  • language_en_to_nl.json
  • language_en_to_pa.json
  • language_en_to_pl.json
  • language_en_to_pt.json
  • language_en_to_ru.json
  • language_en_to_th.json
  • language_en_to_tr.json
  • language_en_to_uk.json
  • language_en_to_ur.json
  • language_en_to_vi.json
  • logo.jpg
    .jpg
  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • nopie_openvpn.x86
    .elf linux x86
  • nopie_openvpn.x86_64
    .elf linux x64
  • online_config_defaults.json
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.x86
    .elf linux x86
  • pie_openvpn.x86_64
    .elf linux x64
  • platform_ad_config.json
  • platform_ad_config_ir.json
  • platform_ad_id_config.json
  • platform_ad_id_config_ir.json
  • purchase_guide_gold.json
  • purchase_guide_platinum.json
  • purchase_template_config.json
  • rolling_gift_box.json
  • server_offline.ser
  • supplierconfig.json
  • tt_mime_type.pro

Android Permissions

com.mod.turbo.vpn.v3.9.3.23.9.3.2.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.QUERY_ALL_PACKAGES

com.android.permission.GET_INSTALLED_APPS

android.permission.CHANGE_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

com.google.android.gms.permission.AD_ID

com.android.vending.BILLING

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE