Overview

overview

7

Static

static

7

Hide.me-4.0.2.apk

android-9-x86

5

Hide.me-4.0.2.apk

android-11-x64

5

full_licenses.html

windows7-x64

1

full_licenses.html

windows10-2004-x64

1

licenses.html

windows7-x64

1

licenses.html

windows10-2004-x64

1

nopie_open...64-v8a

ubuntu-18.04-amd64

nopie_open...64-v8a

debian-9-armhf

nopie_open...64-v8a

debian-9-mips

nopie_open...64-v8a

debian-9-mipsel

nopie_openvpn.armeabi

debian-9-armhf

nopie_open...bi-v7a

debian-9-armhf

nopie_openvpn.x86

ubuntu-18.04-amd64

nopie_openvpn.x86_64

ubuntu-18.04-amd64

pie_openvpn.arm64-v8a

ubuntu-18.04-amd64

pie_openvpn.arm64-v8a

debian-9-armhf

pie_openvpn.arm64-v8a

debian-9-mips

pie_openvpn.arm64-v8a

debian-9-mipsel

pie_openvpn.armeabi

debian-9-armhf

pie_openvp...bi-v7a

debian-9-armhf

pie_openvpn.x86

ubuntu-18.04-amd64

pie_openvpn.x86_64

ubuntu-18.04-amd64

Sharing

Copy URL Twitter E-mail

General

  • Target

    Hide.me-4.0.2.apk

  • Size

    31.8MB

  • MD5

    48d9a1eae6fbd9bd8983ef8727e777dc

  • SHA1

    57844c836b4b1c242da6d19867ac04b2ed0a2047

  • SHA256

    021d71c57b31c1d0067eac4ca6e1a23334a3976366566bbf9150966ac3d32117

  • SHA512

    b9c367878c81f7fe52c2467030c3233ea1b1b65a5b77213dc047964b70745a78a7d3a2e30540926b7a7f7e8ba0f90d341f312c93d06f51c407b049c16ab280de

  • SSDEEP

    786432:AwjAwQfoR/FwQUyWCd54EUvj3A6eEoJKrN7RHKmct6M:jAwh/FzUyWCdyEUbw61frN7xy6M

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Files

  • Hide.me-4.0.2.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    hideme.android.vpn.noPlayStore

    com.android.vpn.activities.LoginActivity


  • FA5Pro-Regular.otf
  • FontAwesome-Messages.ttf
  • FontAwesome5Pro-Light-300.otf
  • FontAwesome5Pro-Regular-400.otf
  • FontAwesome5Pro-Solid-900.otf
  • Frankfurt.ovpn
  • Helvetica.ttf
  • OpenSans-Bold.ttf
  • OpenSans-Italic.ttf
  • OpenSans-Light.ttf
  • OpenSans-Regular.ttf
  • OpenSans-Semibold.ttf
  • baseline.prof
  • baseline.profm
  • full_licenses.html
  • licenses.txt
    .html
  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi
    .elf linux arm
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • nopie_openvpn.x86
    .elf linux x86
  • nopie_openvpn.x86_64
    .elf linux x64
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi
    .elf linux arm
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.x86
    .elf linux x86
  • pie_openvpn.x86_64
    .elf linux x64
  • update_text.txt

Android Permissions

Hide.me-4.0.2.apk

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.QUERY_ALL_PACKAGES

android.permission.POST_NOTIFICATIONS

hideme.android.vpn.noPlayStore.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE