com.free.vpn.activity.SplashA
android.intent.action.MAIN
com.facebook.CustomTabActivity
android.intent.action.VIEW
Static task
static1
1 signatures
General
-
Target
Goat VPN 3.6.5.apk
-
Size
34.2MB
-
MD5
887cb14d37fc6f5a702bef93536290f8
-
SHA1
7fae2fd7c00d92a41460e9c24ab79143ac6a8c94
-
SHA256
0ab66b4df4a337daeb30055660b85b61721c5b6ffa336e9e6bb0b1ee5a1877d4
-
SHA512
59c9d15c27091577b894723dc2d7e3767763436b8303251cea4c4b1938cbcbe372fb4d6382ac3c27bfa1f7aaabdef247d80daa95a6c68a37cb8e86b5184d94c1
-
SSDEEP
786432:Fmdq20s5VgSVcrFwVo2POBo6bvrFLGo79xZQ6Re4H:FkfKrFwVofB5zNGYzZRc4H
Score
7/10
Malware Config
Signatures
-
Requests dangerous framework permissions 5 IoCs
description ioc Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an app to post notifications. android.permission.POST_NOTIFICATIONS
Files
-
Goat VPN 3.6.5.apk.apk android arch:arm64 arch:arm arch:x86 arch:x64
com.secure.proxy.freevpn
com.free.vpn.activity.SplashA
Activities
Permissions
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_WIFI_STATE
com.google.android.gms.permission.AD_ID
android.permission.QUERY_ALL_PACKAGES
android.permission.POST_NOTIFICATIONS
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.FOREGROUND_SERVICE
com.android.vending.BILLING
Receivers
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
Services
com.free.vpn.fcm.MyFirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
de.blinkt.openvpn.core.OpenVPNService
android.net.VpnService
org.strongswan.android.logic.CharonVpnService
android.net.VpnService
-
Anton-Regular.ttf
-
Goat.ovpn
-
Raleway-ExtraLight.ttf
-
nopie_openvpn.arm64-v8a.elf linux aarch64
-
nopie_openvpn.armeabi-v7a.elf linux arm
-
nopie_openvpn.x86.elf linux x86
-
nopie_openvpn.x86_64.elf linux x64
-
origin.apk.apk android arch:x86 arch:x64 arch:arm arch:arm64
com.secure.proxy.freevpn
com.free.vpn.activity.SplashA
Activities
com.free.vpn.activity.SplashA
android.intent.action.MAIN
com.facebook.CustomTabActivity
android.intent.action.VIEW
Permissions
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_WIFI_STATE
com.google.android.gms.permission.AD_ID
android.permission.QUERY_ALL_PACKAGES
android.permission.POST_NOTIFICATIONS
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.FOREGROUND_SERVICE
com.android.vending.BILLING
Receivers
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
Services
com.free.vpn.fcm.MyFirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
de.blinkt.openvpn.core.OpenVPNService
android.net.VpnService
org.strongswan.android.logic.CharonVpnService
android.net.VpnService
-
Anton-Regular.ttf
-
Goat.ovpn
-
Raleway-ExtraLight.ttf
-
nopie_openvpn.arm64-v8a.elf linux aarch64
-
nopie_openvpn.armeabi-v7a.elf linux arm
-
nopie_openvpn.x86.elf linux x86
-
nopie_openvpn.x86_64.elf linux x64
-
pie_openvpn.arm64-v8a.elf linux aarch64
-
pie_openvpn.armeabi-v7a.elf linux arm
-
pie_openvpn.x86.elf linux x86
-
pie_openvpn.x86_64.elf linux x64
-
tt_mime_type.pro
-
tt_na.czl
-
tt_nd.elf linux x86
-
pie_openvpn.arm64-v8a.elf linux aarch64
-
pie_openvpn.armeabi-v7a.elf linux arm
-
pie_openvpn.x86.elf linux x86
-
pie_openvpn.x86_64.elf linux x64
-
tt_mime_type.pro
-
tt_na.czl
-
tt_nd.elf linux x86
Android Permissions
Goat VPN 3.6.5.apk
Permissions
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_WIFI_STATE
com.google.android.gms.permission.AD_ID
android.permission.QUERY_ALL_PACKAGES
android.permission.POST_NOTIFICATIONS
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.FOREGROUND_SERVICE
com.android.vending.BILLING