General

  • Target

    RiseupVPN-Android-latest.apk

  • Size

    67.4MB

  • MD5

    c02dbbde885c9f59902b0da2dae7243e

  • SHA1

    e746e2c5856b6346da08d75dee18682f2c5f6b24

  • SHA256

    244eac473faa3622c492732170b04cb6fa0f0f5cb641f40124c1e1b4d6c39c7f

  • SHA512

    403cdc5ee1d68ca6c9bf2e7156fc28301d6da9f6214d73ba63a5458849d418d80b1f6f05ccbbce3de7cd302acc446cfc30e1c6fead9e59c2fada5a4df5560d72

  • SSDEEP

    1572864:tEYWQKyeKnElptBjvcM3/j2Em7z780fn6KXck4knPNO9TzHCB7h:tEYtneYaptBLc42Em7zoGvXKRHCB7h

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs

Files

  • RiseupVPN-Android-latest.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    se.leap.riseupvpn

    se.leap.bitmaskclient.base.StartActivity


  • baseline.prof
  • baseline.profm
  • fronts
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.x86
    .elf linux x86
  • pie_openvpn.x86_64
    .elf linux x64
  • public.pgp
  • riseup.net.json
  • riseup.net.pem

Android Permissions

RiseupVPN-Android-latest.apk

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES