General

  • Target

    com.mod.mobile.security.vpn.proxy.anti.theft.safe.wifi.mod.v5.3.1.522.unlocked5.3.1.522[1].apk

  • Size

    34.8MB

  • MD5

    f5c14260fede2692ac9e7f49b315a0b4

  • SHA1

    de290cb1ba49391f421b0a124f785b41ea5c6f09

  • SHA256

    c40af3be38e8216f52a2817a122e82d253f53ed05c5b1a97dde73413127b8553

  • SHA512

    dd78f5f2e02685d914e102a7f188754761cfb4830b19d91d96b0df130d0bd045990bd89e01734f0da340c933d6c9a758543b5d578465fd1e6f7f18e0a6845af1

  • SSDEEP

    786432:8v5l8zkQOrhRe0k0G5UAXRmoqmnDgZ+M9VSSHy1:8D8AQehE0GCgRVqOD8+M9VSSH8

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 13 IoCs

Files

  • com.mod.mobile.security.vpn.proxy.anti.theft.safe.wifi.mod.v5.3.1.522.unlocked5.3.1.522[1].apk
    .apk android arch:arm64 arch:arm

    com.wsandroid.suite

    com.mcafee.app.LauncherDelegateActivity


  • LicensedPermissions.xml
    .xml
  • MESSAGE_PROMOTE_TRUE_KEY_UPON_APP_LAUNCH.json
  • MessagingRules.lua
  • analytics_configuration.json
  • analytics_configuration_encrypted.json
  • api_key.txt
  • apps.json
  • atb_license.txt
  • ca.crt
  • crashlytics-build.properties
  • key.crt
  • license.html
  • license.txt
  • macvendor.csv
  • messaging_config.json
  • mme_firebase_configuration.json
  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi
    .elf linux arm
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • nopie_openvpn.x86
    .elf linux x86
  • open_sans_regular.ttf
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi
    .elf linux arm
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.x86
    .elf linux x86
  • sa_glist.txt
  • sa_oem.txt
  • sa_urlresolverpatterns.txt
  • url.json
  • vpn_config.txt
  • vsm_init_ml_dru.dat
  • vsm_init_uv_dru.dat

Android Permissions

com.mod.mobile.security.vpn.proxy.anti.theft.safe.wifi.mod.v5.3.1.522.unlocked5.3.1.522[1].apk

Permissions

android.permission.MODIFY_PHONE_STATE

android.permission.READ_LOGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.DISABLE_KEYGUARD

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.WRITE_SYNC_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.RESTART_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_UPDATES

android.permission.WAKE_LOCK

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.GET_TASKS

android.permission.REAL_GET_TASKS

android.permission.CALL_PHONE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_PACKAGE_SIZE

android.permission.ANSWER_PHONE_CALLS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.wsandroid.suite.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

com.android.vending.BILLING

android.permission.RAISED_THREAD_PRIORITY

android.permission.DELETE_PACKAGES

android.permission.BIND_DEVICE_ADMIN

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

com.android.vending.CHECK_LICENSE

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REORDER_TASKS