Overview

overview

7

Static

static

7

baa272b728...17.apk

android-9-x86

7

baa272b728...17.apk

android-10-x64

7

nopie_open...64-v8a

ubuntu-18.04-amd64

nopie_open...64-v8a

debian-9-armhf

nopie_open...64-v8a

debian-9-mips

nopie_open...64-v8a

debian-9-mipsel

nopie_open...bi-v7a

debian-9-armhf

nopie_openvpn.x86

ubuntu-18.04-amd64

nopie_openvpn.x86_64

ubuntu-18.04-amd64

pie_openvpn.arm64-v8a

ubuntu-18.04-amd64

pie_openvpn.arm64-v8a

debian-9-armhf

pie_openvpn.arm64-v8a

debian-9-mips

pie_openvpn.arm64-v8a

debian-9-mipsel

pie_openvp...bi-v7a

debian-9-armhf

pie_openvpn.x86

ubuntu-18.04-amd64

pie_openvpn.x86_64

ubuntu-18.04-amd64

Sharing

Copy URL Twitter E-mail

General

  • Target

    baa272b72820f1b45d81d2fe78022b17.bin

  • Size

    16.7MB

  • MD5

    baa272b72820f1b45d81d2fe78022b17

  • SHA1

    ca9d844067e565c8e8f2c9d10b1446c7f0cc9c0a

  • SHA256

    7cc2d96fc7b0fe4d32b8d159e1db30b7775e2d3c999d2ede2bf50be76c6f91cb

  • SHA512

    bc5337c340c7e17bbfeab54760c94cfabe703a4169ad3b5e1b04a37bb2916ba56bbed35b828ee56e71fb69321929b80e1a33d106f0e2c1b548d247f90c25de97

  • SSDEEP

    393216:FSKP32Y4zJTnnfVrXcl22xR5CCwAfEKLy1Ys3UIc:wKPurdLSRwgNup3Ub

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs

Files

  • baa272b72820f1b45d81d2fe78022b17.bin
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    Password: infected

    com.vpn.lat

    com.abc.opvpnfree.WelcomeActivity


  • Roboto-Bold.ttf
  • Roboto-Light.ttf
  • Roboto-Medium.ttf
  • Roboto-Regular.ttf
  • audience_network.dex
    .dex
  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • nopie_openvpn.x86
    .elf linux x86
  • nopie_openvpn.x86_64
    .elf linux x64
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.x86
    .elf linux x86
  • pie_openvpn.x86_64
    .elf linux x64

Android Permissions

baa272b72820f1b45d81d2fe78022b17.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.POST_NOTIFICATIONS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.WRITE_SYNC_SETTINGS

com.google.android.gms.permission.AD_ID

android.permission.WRITE_SETTINGS

android.permission.QUERY_ALL_PACKAGES

com.android.alarm.permission.SET_ALARM

com.android.vending.BILLING

com.vpn.lat.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.VIBRATE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE