com[.]joojvpn[.]uj[.]io_103-p_aab_apksos[.]com[.]zip

Resubmissions

07-08-2023 05:07

230807-fr9dladf66 7

07-08-2023 05:04

230807-fqc9rseh9v 7

07-08-2023 05:01

230807-fnthzadf57 7

Sharing

Copy URL

Twitter E-mail

General

Target

com.joojvpn.uj.io_103-p_aab_apksos.com.zip
Size

26.6MB
MD5

9953d28f9fb64a31642e2a1d06929b5c
SHA1

f73bf75c20195f8668fb2f15fe69b8706b4abcb8
SHA256

8ee9c8318e85afcacd54e4653d1ee66bf594f2b1916598ddac9bf93eebe45469
SHA512

c85cf49da3b54dfe095a5b8c9cc14b0b884d6667b79fc80e23f6b0d4ad7e895c033b07463bbcba0f681c33c6f24591758aab3e52773e921320be69183928237f
SSDEEP

393216:0dYQCsL4Aat/Cf7s0HbyYW3hviid10tC7WULFk8b4wK4iBuZFy:uYQUtCTsOVWRviIbhhb4XA2

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

com.joojvpn.uj.io_103-p_aab_apksos.com.zip
.zip
com.joojvpn.uj.io/How-to-install.txt
com.joojvpn.uj.io/appicon_1.png
.png
com.joojvpn.uj.io/com.joojvpn.uj.io-1-apksos.com.apk
.apk android

com.joojvpn.uj.io

com.joojvpn.app.MainActivity

Activities

com.joojvpn.app.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_WIFI_STATE
com.google.android.gms.permission.AD_ID
android.permission.POST_NOTIFICATIONS
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

com.joojvpn.lib.v2ray.services.V2rayVPNService

android.net.VpnService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
baseline.prof
baseline.profm
geoip.dat
geosite.dat
com.joojvpn.uj.io/config.armeabi_v7a-1.apk
.apk android arch:arm

com.joojvpn.uj.io
com.joojvpn.uj.io/config.en-1.apk
.apk android

com.joojvpn.uj.io
com.joojvpn.uj.io/config.es-1.apk
.apk android

com.joojvpn.uj.io
com.joojvpn.uj.io/config.xxhdpi-1.apk
.apk android

com.joojvpn.uj.io

Resubmissions

Sharing

General

Malware Config

Signatures

Files

com.joojvpn.uj.io

com.joojvpn.app.MainActivity

Activities

com.joojvpn.app.MainActivity

Permissions

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

com.joojvpn.lib.v2ray.services.V2rayVPNService

com.google.firebase.messaging.FirebaseMessagingService

com.joojvpn.uj.io

com.joojvpn.uj.io

com.joojvpn.uj.io

com.joojvpn.uj.io